Security Advisory

CVE-2026-85429

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-03 22:38:23

Last updated 2026-09-05 02:23:47

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE_MESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without validation.

← Browse all CVEs View on cve.org ↗