CVE-2026-85446 [HIGH] – MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeC

MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pairs distribution work. Attackers can supply unbounded distinct node names in reports to drive the shoreside broker into quadratic processing, delaying or preventing distribution of legitimate node reports.