913 matches found
CVE-2026-67975
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TOLAB add/remove subscription commands...
CVE-2026-67973
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...
CVE-2026-67969
An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...
CVE-2026-67972
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
CVE-2026-67970
The connected documents confirm a vulnerability in NASA cFS v7.0.1 involving the DS_SetDestPathCmd() component, where incorrect access control enables path traversal to access sensitive components. The issue is described consistently across NVD, CVE records, EUVD ENISA, and CVE listings. The CVSS...
CVE-2026-67972
CVE-2026-67972 affects NASA cFS v7.0.1, in the CF_CFDP_RecvMd() component. The issue allows attackers to control where received content and data are stored, which can lead to information disclosure. The available sources specify the affected product and component, and note the potential for discl...
CVE-2026-67974
A parser boundary flaw in the Software Bus Network SBN application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via sending a crafted packet...
CVE-2026-67972
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
CVE-2026-67975
CVE-2026-67975 concerns NASA cFS v7.0.1. The issue is an improper access-control flaw in the subscription/stream management mechanism, allowing an attacker to arbitrarily remove low-index subscriptions and add new streams by issuing TO_LAB add/remove subscription commands over the network. The CV...
CVE-2026-67972
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
CVE-2026-67969
An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...
CVE-2026-67973
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via replaying final CFDP PDUs...
CVE-2026-67978
An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service DoS via transmitting a crafted SBN frame...
CVE-2026-18064
An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...
CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...
CVE-2026-18064
CVE-2026-18064 affects NASA’s core Flight System (cFS) Health and Safety (HS) application. The issue is an incomplete fix for CVE-2026-15352, leaving a separate NULL pointer dereference exploitable in HS versions up to and including 7.0.1. A successful trigger of the affected command under specif...
CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...
PT-2026-66616
An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...
CVE-2026-59896
A flaw was found in Hono, a Web application framework. The hono/jsx component did not properly isolate context values per request during server-side rendering. This allowed data from a different in-flight request to be used after an asynchronous operation in a component. This could lead to...
