Beveiligingsadvies

CVE-2026-85434

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-03 22:38:27
Laatst bijgewerkt 2026-09-05 02:25:21
Toegewezen door VulnCheck
CVSS-score 9.3
Status PUBLISHED

Beschrijving

MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses.