Is CVE-2026-85446 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85446?

CVE-2026-85446 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-85446

Description

MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic processing, delaying or preventing distribution of legitimate node reports.