MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. (CVE-2026-85434)
Description
MOOS-IvP uFldShoreBroker versions through 24.8.1 do not verify the authenticity of node ping messages before creating outbound bridge routes. This allows attackers to send crafted NODE_BROKER_PING messages with malicious HostRecord data, potentially redirecting bridged variables to attacker-controlled addresses. The vulnerability has a critical severity with a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring privileges or user interaction.
CVSS v3.1
Score 9.1critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The MOOS-IvP uFldShoreBroker component up to version 24.8.1 contains a vulnerability where it fails to authenticate NODE_BROKER_PING messages before establishing outbound bridge routes. An attacker can exploit this by publishing specially crafted ping messages containing malicious HostRecord data, causing the system to redirect bridged variables to attacker-controlled endpoints. This flaw corresponds to CWE-345 (Insufficient Verification of Data Authenticity). The vulnerability is remotely exploitable without authentication or user interaction and can lead to high confidentiality and integrity impacts.
Potential Impact
Successful exploitation can lead to attackers redirecting bridged variables to addresses under their control, compromising the confidentiality and integrity of data communicated via the bridge routes. There is no impact on availability reported. The vulnerability is remotely exploitable without requiring privileges or user interaction.
Mitigation Recommendations
No official patch or fix is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider restricting network access to trusted sources and monitor for suspicious NODE_BROKER_PING messages if possible.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-cgqh-8w72-p7rf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-85434"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Threat ID: 6a9ad4f8acd9273b49b67a60
Added to database: 09/04/2026, 14:26:00 UTC
Last enriched: 09/07/2026, 14:52:20 UTC
Last updated: 10/18/2026, 06:48:20 UTC
Views: 25
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.