EUVD-2026-70782

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing. A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory...

EUVD-2026-70806

MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODEBROKERPING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses...

CVE-2026-85448

MOOS-IvP uFldShoreBroker through version 24.8.1 contains an unbounded community state retention vulnerability in ShoreBroker::handleMailNodePing() . The function fails to limit the number of claimed community names stored in parallel vectors, allowing a single network publisher to supply unbounde...

CVE-2026-85434

MOOS-IvP uFldShoreBroker through version 24.8.1 contains a bridge route injection vulnerability. The component fails to verify node ping authenticity before creating outbound bridge routes, allowing an attacker on the network to publish NODE_BROKER_PING messages with crafted HostRecord data and r...