CVE-2026-85435 MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment
Attackers can inject malicious shore routes to intercept vehicle sensor data and control information due to lack of message source validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-85435?
CVE-2026-85435 is a critical missing authorization vulnerability in moos-ivp, published on 3 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including sensor data and control information.
Weakness: CWE-345
Which versions are affected by CVE-2026-85435?
It affects 1 product.
Products include Mit Moos-Ivp.
How do I fix CVE-2026-85435?
No fix has been published for CVE-2026-85435 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-85435 being exploited?
There is no known exploitation of CVE-2026-85435 in the wild and no public exploit code.
Other vulnerabilities in moos-ivp
- CVE-2026-85425 MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS
- CVE-2026-85434 MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping
- CVE-2026-85437 MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders
- CVE-2026-85438 MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts
- CVE-2026-85429 MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
Sources
Also known as GHSA-7674-4w38-m6r3.