PT-2026-85288 · Moos Ivp · Moos-Ivp

Vlatko Kosturjak

·

CVE-2026-85439

·

Published

2026-09-03

·

Updated

2026-09-04

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2
Description A remote code execution issue exists in the SplitHandler::handlePreCheckSplitDir() function of alogsplit. The software fails to sanitize shell metacharacters within log file pathnames, allowing attackers to embed shell syntax in log file names or the --dir parameter to execute arbitrary commands with the privileges of the operator running alogsplit.
Recommendations Update MOOS-IvP to version 24.8.2 or later.

Fix

RCE

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-85439

Affected Products

Moos-Ivp