Vulnerabilities in moos-ivp
15 resultsVexday analysis
MOOS-IVP apresenta 15 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes e concentradas no tempo. Embora 6 sejam classificadas como críticas e nenhuma esteja sob exploração ativa documentada (KEV), o padrão de fraqueza dominante (CWE-345: insuficiente verificação de autenticação) sugere falhas estruturais no controle de acesso que demandam avaliação prioritária. O risco é moderado-alto pela recência e severidade, mas com janela de oportunidade antes de exploração em larga escala.
CVE-2026-85425CRITICALMOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOSEPSS 1.0%CVE-2026-85437CRITICALMOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String DecodersEPSS 0.7%CVE-2026-85426CRITICALMOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client NamesEPSS 0.6%CVE-2026-85438CRITICALMOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload CountsEPSS 0.5%CVE-2026-85449HIGHMOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORTEPSS 0.4%CVE-2026-85444HIGHMOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevronedEPSS 0.4%CVE-2026-85446HIGHMOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of ServiceEPSS 0.4%CVE-2026-85445HIGHMOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet CountEPSS 0.4%CVE-2026-85448HIGHMOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State RetentionEPSS 0.4%CVE-2026-85447HIGHMOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of ServiceEPSS 0.4%CVE-2026-85439HIGHMOOS-IvP through 24.8.1 alogsplit Command Injection via Input PathnameEPSS 0.3%CVE-2026-85429HIGHMOOS-IvP through 24.8.1 uFldNodeComms Node Message Source SpoofingEPSS 0.2%CVE-2026-85435CRITICALMOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route EnrollmentEPSS 0.2%CVE-2026-85434CRITICALMOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node PingEPSS 0.2%CVE-2026-85456MEDIUMMOOS-IvP through 24.8.1 alog Splitting Path Traversal on WindowsEPSS 0.1%