What is the CVSS score of CVE-2026-71643?

CVE-2026-71643 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of N A are affected by CVE-2026-71643?

A high-severity availability flaw affects EGO-Planner-v2, the open-source trajectory planning component used in autonomous quadrotor flight stacks, potentially allowing an attacker to stall or crash…

How to fix or mitigate CVE-2026-71643?

Within 24 hours, identify every airframe, simulation environment, and downstream product that embeds EGO-Planner-v2 at or below commit 5c99a958, and suspend untrusted or externally reachable network exposure of the planner where operationally feasible; treat any deployment where the planner input path is network-accessible as the priority. Within 7 days, implement interim mitigations by isolating planner communications behind authenticated, encrypted links, applying strict input validation and rate limiting on any topic or interface that feeds the EGOReplanFSM, and enforcing resource ceilings (watchdog timers, memory and CPU quotas, and fail-safe return-to-home or hover behaviors) so an induced stall degrades gracefully rather than causing loss of control. Within 30 days, engage the ZJU-FAST-Lab maintainers and track the referenced public GitHub issue for a fixed commit, and if none is available, evaluate alternate planner implementations or fork and harden the EGOReplanFSM component, then re-deploy with regression and flight-safety testing.

N A CVE-2026-71643

EUVD-2026-75874 HIGH

Uncontrolled Resource Consumption (CWE-400)

2026-09-10 mitre

GHSA-v6cj-vf2p-gjc7

Denial Of Service N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 10:50 vuln.today

CVSS changed

Sep 14, 2026 - 18:37 NVD

7.5 (HIGH)

CVE Published

Sep 10, 2026 - 00:00 cve.org

HIGH 7.5

CVE Published

Sep 10, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM component

AnalysisAI

Denial of service in ZJU-FAST-Lab EGO-Planner-v2 (all versions through commit 5c99a958) lets an attacker stall or crash the planner by driving the EGOReplanFSM component into uncontrolled resource consumption (CWE-400). The vulnerable component is the finite state machine that orchestrates local trajectory replanning for autonomous quadrotors, so a successful attack removes fresh trajectory generation from the flight stack. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, identify every airframe, simulation environment, and downstream product that embeds EGO-Planner-v2 at or below commit 5c99a958, and suspend untrusted or externally reachable network exposure of the planner where operationally feasible; treat any deployment where the planner input path is network-accessible as the priority. …

Threat intelligence, references, and detailed analysis are available after sign-in.