SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-85439

HIGH · CVSS 7.8 EPSS 0.25% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A remote code execution vulnerability exists in the alogsplit component of MOOS-IvP versions up to 24.8.1, due to improper sanitization of shell metacharacters in log file pathnames. This flaw allows attackers to inject shell commands through log file names or the --dir parameter, potentially executing arbitrary commands with the privileges of the alogsplit operator. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of unauthorized command execution.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-85439
Severity
HIGH
CVSS
7.8
EPSS
0.25%

Original NVD Description

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary commands with the privileges of the operator running alogsplit.