cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | Local File Inclusion in WordPress Nasa Core Plugin 📝 Scenario: A Day in the SOC It’s a regular Monday. I’m logged into the SOC dashboard, reviewing alerts like usual. One comes in that catches my eye: ALERT: Possible Local File Inclusion L...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 is a SQL Injection vulnerability identified in the MODAPS system of NASA EOSDIS, caused by improper input validation in the category parameter. This vulnerability allow attackers to access sensitive data, and execute arbitrary SQL queries through HTTP GET parameter manipulation usi...

EUVD-2026-92130

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164

A flaw in NASA cFS versions up to 7.0.1 allows for an out-of-bounds read via the CFE_FS_ParseInputFileNameEx function located in cfe/modules/fs/fsw/src/cfe_fs_api.c. This vulnerability can be triggered through remote exploitation . While a pull request to address the issue exists, the documents i...

CVE-2026-105164: Out-of-bounds Read

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

PT-2026-104650

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE FS ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe fs api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits...

CVE-2026-105105

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

EUVD-2026-92014

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105

The NASA-AMMOS AIT-Core (versions through 3.1.1 ) is vulnerable to CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server ). The underlying cause is that the ZeroMQ broker binds its XSUB and XPUB sockets to all network interfaces by d...

CVE-2026-105105: Missing Authentication for Critical Function

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

PT-2026-104572

Name of the Vulnerable Software and Affected Versions NASA-AMMOS AIT-Core versions prior to 3.1.2 Description The ait.core.server telemetry and command broker ait-server lacks authentication for critical functions. By default, the ZeroMQ message bus binds its XSUB and XPUB sockets to all network...

CVE-2026-79954

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...

CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...

CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...