PatchSiren

ZJU-FAST-Lab CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH ZJU-FAST-Lab CVE published 2026-09-11

CVE-2026-71641

CVE-2026-71641 is a high-severity vulnerability affecting ZJU-FAST-Lab's EGO-Planner-v2, potentially allowing denial of service via interactions between traj_server, poscmd_2_odom, and EGOReplanFSM emergency recovery logic. Defenders should assess exposure, prioritize verification, and consider compensating controls. The vulnerability affects versions up to commit 5c99a95880401e2599638d567abc0e240396cb42. [truncated]

HIGH ZJU-FAST-Lab CVE published 2026-09-10

CVE-2026-71647

CVE-2026-71647 is a high-severity vulnerability in EGO-Planner-v2, a software project hosted on GitHub. An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFromGlobalTraj in ego_replan_fsm.cpp. The CVSS score for this vulnerability is 7.5, indicating a high severit [truncated]

HIGH ZJU-FAST-Lab CVE published 2026-09-10

CVE-2026-71643

CVE-2026-71643 is a high-severity vulnerability in the EGO-Planner-v2 component, specifically affecting the EGOReplanFSM component, which could allow an attacker to cause a denial of service. The CVE record was published on 2026-09-10T22:16:58.940Z and was last modified on 2026-09-14T18:19:48.243Z. The NVD entry is currently has not been modified since then.

MEDIUM ZJU-FAST-Lab CVE published 2026-09-10

CVE-2026-71642

CVE-2026-71642 is a denial-of-service vulnerability in EGO-Planner-v2, affecting all versions up to a specific commit (5c99a95880401e2599638d567abc0e240396cb42). The issue arises from the EGOReplanFSM::checkCollisionCallback() function. The CVE record was published on 2026-09-10T22:16:58.797Z and has not been modified since then. The NVD entry is currently Unclassified. This vulnerability requires verific [truncated]

CRITICAL ZJU-FAST-Lab CVE published 2026-09-10

CVE-2026-71640

CVE-2026-71640 is a critical vulnerability in EGO-Planner-v2 that allows unsafe vehicle motion due to improper handling of expired trajectory data. The issue exists in all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42. Defenders should assess exposure, especially those managing autonomous vehicle systems or researching vehicle safety.