Is CVE-2026-85447 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85447?

CVE-2026-85447 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-85447

Description

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipeways with many variables to cause pRealm to generate excessive output indefinitely, exhausting system resources.