CVE-2026-85429

MOOS-IvP uFldNodeComms (through version 24.8.1) trusts the source node identity from the message body rather than validating it against the connection source. An attacker can craft NODE_MESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notificat...