Veille CVE

Mardi 4 août 2026

7 CVE

Critique 1 Élevée 6 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « NASA cFS » ✕
  1. CVE-2026-67979 9.1 Critique

    Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage.

  2. CVE-2026-67978 7.5 Élevée

    An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN frame.

  3. CVE-2026-67975 7.5 Élevée

    Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TO_LAB add/remove subscription commands.

  4. CVE-2026-67974 7.5 Élevée

    A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via sending a crafted packet.

  5. CVE-2026-67973 7.5 Élevée

    An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs.

  6. CVE-2026-67970 7.5 Élevée

    Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal.

  7. CVE-2026-67969 7.5 Élevée

    An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl entry.