Medium severity · published Aug 30, 2026
CVE-2026-82479
NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
cFS · NASA
7.0.0; 7.0.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82479
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82479
vuldb.com
https://vuldb.com/cve/CVE-2026-82479
vuldb.com
https://vuldb.com/submit/888017
vuldb.com
https://vuldb.com/vuln/397029
vuldb.com
https://vuldb.com/vuln/397029/cti
More from cFS
8.8
CVE-2026-5474
NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow
7.4
CVE-2026-82480
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow
7.0
CVE-2026-5473
NASA cFS Pickle pickle.load deserialization
5.5
CVE-2026-5475
NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption
4.6
CVE-2026-5476
NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow