CF
Product
Core Flight System
by Nasa · last CVE Apr 3, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch

Add Core Flight System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-25373
9.8
1%
Mar 25
The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform
Affected: 6.7.0
CVE-2026-5474
8.8
0%
Apr 3
NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow
Affected: through 7.0.0
CVE-2025-25374
7.5
0%
Mar 25
In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial…
Affected: 6.7.0
CVE-2025-25372
7.5
0%
Mar 25
NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module
Affected: 6.7.0
CVE-2025-25371
7.5
1%
Mar 25
NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system
Affected: 6.7.0
CVE-2026-5473
7.0
0%
Apr 3
NASA cFS Pickle pickle.load deserialization
Affected: through 7.0.0
CVE-2026-5475
5.5
0%
Apr 3
NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption
Affected: through 7.0.0
CVE-2026-5476
4.6
0%
Apr 3
NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow
Affected: through 7.0.0
Showing 8