SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-71644

CRITICAL · CVSS 9.8 EPSS 0.35% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the Robotics-STAR-Lab's RACER system allows attackers to exploit a missing default case in the finite state machine (FSM), leading to unsafe trajectory planning and potential collisions among unmanned aerial vehicles (UAVs). This critical flaw poses significant risks to operational safety and integrity, particularly for organizations utilizing drone swarms in sensitive or high-stakes environments. Entities involved in drone operations or UAV management should prioritize immediate remediation to mitigate the risk of catastrophic failures.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71644
Severity
CRITICAL
CVSS
9.8
EPSS
0.35%

Original NVD Description

An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE