CF
Product
Core Flight System
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch
Add Core Flight System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5474 | 8.8 | Apr 3 | NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow Affected: through 7.0.0 |
| CVE-2025-25374 | 7.5 | Mar 25 | In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial… Affected: 6.7.0 |
| CVE-2025-25372 | 7.5 | Mar 25 | NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module Affected: 6.7.0 |
| CVE-2025-25371 | 7.5 | Mar 25 | NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system Affected: 6.7.0 |
| CVE-2026-5473 | 7.0 | Apr 3 | NASA cFS Pickle pickle.load deserialization Affected: through 7.0.0 |
Showing 5