PT-2026-67537

Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description Incorrect access control in the DS SetDestPathCmd function allows attackers to access sensitive components through path traversal, a technique used to access files or directories outside the intended folder b...

CVE-2026-67970

Incorrect access control in the DSSetDestPathCmd component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal...