NASA

Products

Exploited and recent CVEs

• CVE-2026-92160 Medium 6.5 F´: SendPartial Integer Overflow Leading to Assertion DoS 0.3%
• CVE-2026-92155 High 7.5 F´: FileUplink Unknown Packet Type Assertion DoS 0.4%
• CVE-2026-92150 High 7.5 F´: GenericHub Malformed Buffer Assertion DoS 0.6%
• CVE-2026-92154 High 8.1 F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation 0.6%
• CVE-2026-92158 High 7.2 F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write 0.9%
• CVE-2026-92159 Medium 6.5 F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry 0.4%
• CVE-2026-92156 Medium 6.5 F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge 0.5%
• CVE-2026-92157 Medium 6.5 F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion 0.6%
• CVE-2026-92152 Critical 9.3 F´: Unvalidated Port Index in GenericHub 0.7%
• CVE-2026-92153 High 7.1 F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath 0.4%
• CVE-2026-92151 High 7.5 F´: SpacePacketDeframer Small Packet Assertion DoS 0.5%
• CVE-2026-105164 Low 2.7 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds 0.3%
• CVE-2026-79954 High 8.7 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID 0.6%
• CVE-2026-82802 Medium 5.3 NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery 0.5%
• CVE-2026-82801 High 7.3 NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery 0.5%
• CVE-2026-82480 High 7.4 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow 0.4%
• CVE-2026-82479 Medium 6.3 NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow 0.4%
• CVE-2026-82478 High 7.3 NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow 0.5%
• CVE-2026-72579 High 7.5 NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server 1.1%
• CVE-2026-72577 Critical 9.8 NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection 1.3%
• CVE-2026-18064 High 7.5 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference 0.6%
• CVE-2026-15352 High 7.5 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference 0.6%
• CVE-2026-41144 None 0.0 F´ (F Prime) has Integer Overflow in FileUplink 0.4%
• CVE-2026-5476 Medium 4.6 NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow 0.2%
• CVE-2026-5475 Medium 5.5 NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption 0.2%
• CVE-2026-5474 Medium 6.3 NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow 0.4%
• CVE-2026-5473 Medium 4.5 NASA cFS Pickle pickle.load deserialization 0.2%
• CVE-2026-22697 High 7.5 CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) 0.5%
• CVE-2026-22027 Medium 5.7 CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion 0.2%
• CVE-2026-22026 High 8.2 CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion 0.6%