VULNERABILITY INTELLIGENCE

CVE-2026-85448

CVSS score8.7 HIGH

EPSS probability0.78%

CISA KEVNot currently listed

Published2026-09-03

Last modified2026-10-14

Description

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and performance degradation.