MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipeways with many variables to cause pRealm to generate excessive output indefinitely, exhausting system resources.
2026年9月5日
CVE-2026-85447 [HIGH] – MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions witho
📑 文章目录



