Is CVE-2026-85448 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85448?

CVE-2026-85448 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-85448

Description

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and performance degradation.