96 matches found
Trust without Boundaries: An Architectural Analysis of Satellite Flight Software
As spacecraft become more software-driven and interconnected, onboard flight software is an increasingly important security boundary. Popular flight software architectures often treat onboard components as trusted peers, simplifying integration while limiting internal isolation and access control...
CVE-2026-67979
Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage...
EUVD-2026-52511
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TOLAB add/remove subscription commands...
CVE-2026-67979
Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage...
EUVD-2026-52972
Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage...
CVE-2026-67978
An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...
CVE-2026-67969
An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...
CVE-2026-67975
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TOLAB add/remove subscription commands...
CVE-2026-67972
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
CVE-2026-67970
A path traversal vulnerability exists in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 due to incorrect access control . This flaw allows an attacker to bypass security restrictions to access sensitive components . No information regarding specific exploits, in-the-wild exploitation, or re...
CVE-2026-67975
NASA cFS v7.0.1 is affected by an incorrect access control vulnerability. This flaw allows an attacker to arbitrarily remove low-index subscriptions and add new streams by sending TO_LAB add/remove subscription commands. Exploitation details and specific remediation steps are not provided in the ...
CVE-2026-67978
An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...
CVE-2026-67978
An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...
CVE-2026-67972
NASA cFS v7.0.1 is affected by a vulnerability in the CF_CFDP_RecvMd() component. This issue allows an attacker to control the storage location of received content and data, which may lead to information disclosure . No specific remediation details, exploit links, or MITRE ATT&CK IDs were provide...
CVE-2026-67969
An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...
CVE-2026-67972
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
CVE-2026-67972
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
PT-2026-67537
Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description Incorrect access control in the DS SetDestPathCmd function allows attackers to access sensitive components through path traversal, a technique used to access files or directories outside the intended folder b...