NA
Vendor
nasa
91
CVEs
0
On KEV
14
New 30D
Products
FP9.8
fprime
nasa
15 CVEs0 on KEV11 new
CF9.8
CFITSIO
NASA
7 CVEs0 on KEV2 new
CF8.8
cFS
NASA
7 CVEs0 on KEV1 new
CR9.9
CryptoLib
nasa
28 CVEs0 on KEV0 new
CF9.8
Core Flight System
Nasa
8 CVEs0 on KEV0 new
AC9.8
Ait Core
Nasa
6 CVEs0 on KEV0 new
OP7.5
Openmct
Nasa
6 CVEs0 on KEV0 new
CF7.5
Core Flight System (cFS) Health & Safety (HS) Application
NASA
2 CVEs0 on KEV0 new
EA7.3
earthdata-search
NASA
2 CVEs0 on KEV0 new
AD9.8
Ait Dsn
Nasa
1 CVEs0 on KEV0 new
AG9.8
Ait Gui
Nasa
1 CVEs0 on KEV0 new
FP9.8
fprime-gds
NASA
1 CVEs0 on KEV0 new
HY7.5
HyperCP
NASA
1 CVEs0 on KEV0 new
KO8.8
Kodiak
Nasa
1 CVEs0 on KEV0 new
OP6.2
openVSP
NASA
1 CVEs0 on KEV0 new
PY7.8
Pyblock
Nasa
1 CVEs0 on KEV0 new
RT8.8
Rtretrievalframework
Nasa
1 CVEs0 on KEV0 new
SI7.8
Singledop
Nasa
1 CVEs0 on KEV0 new
TR7.3
Trick
NASA
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111125 | CF Cfitsio Nasa | 7.1 | Oct 15 | CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble |
| CVE-2026-111124 | CF Cfitsio Nasa | 7.1 | Oct 15 | CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed |
| CVE-2026-92160 | FP fprime nasa | 6.5 | Oct 14 | F´: SendPartial Integer Overflow Leading to Assertion DoS |
| CVE-2026-92155 | FP fprime nasa | 7.5 | Oct 14 | F´: FileUplink Unknown Packet Type Assertion DoS |
| CVE-2026-92150 | FP fprime nasa | 7.5 | Oct 14 | F´: GenericHub Malformed Buffer Assertion DoS |
| CVE-2026-92154 | FP fprime nasa | 8.1 | Oct 14 | F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation |
| CVE-2026-92158 | FP fprime nasa | 7.2 | Oct 14 | F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write |
| CVE-2026-92159 | FP fprime nasa | 6.5 | Oct 14 | F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry |
| CVE-2026-92156 | FP fprime nasa | 6.5 | Oct 14 | F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge |
| CVE-2026-92157 | FP fprime nasa | 6.5 | Oct 14 | F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion |
| CVE-2026-92152 | FP fprime nasa | 9.3 | Oct 14 | F´: Unvalidated Port Index in GenericHub |
| CVE-2026-92153 | FP fprime nasa | 7.1 | Oct 14 | F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath |
| CVE-2026-92151 | FP fprime nasa | 7.5 | Oct 14 | F´: SpacePacketDeframer Small Packet Assertion DoS |
| CVE-2026-105164 | CF cFS NASA | 2.7 | Oct 4 | NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds |
| CVE-2026-79954 | CR CryptoLib NASA | 8.7 | Sep 18 | NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID |
| CVE-2026-82802 | EA earthdata-search NASA | 5.3 | Aug 31 | NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery |
| CVE-2026-82801 | EA earthdata-search NASA | 7.3 | Aug 31 | NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery |
| CVE-2026-82480 | CF cFS NASA | 7.4 | Aug 30 | NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow |
| CVE-2026-82479 | CF cFS NASA | 6.3 | Aug 30 | NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow |
| CVE-2026-82478 | TR Trick NASA | 7.3 | Aug 30 | NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow |
| CVE-2026-72579 | HY HyperCP NASA | 7.5 | Aug 10 | NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server |
| CVE-2026-72577 | FP fprime-gds NASA | 9.8 | Aug 10 | NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection |
| CVE-2026-18064 | CF Core Flight System (cFS) Health & Safety (HS) Application NASA | 7.5 | Jul 30 | NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference |
| CVE-2026-60113 | AD Ait Dsn Nasa | 9.8 | Jul 29 | AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes |
| CVE-2026-60112 | AG Ait Gui Nasa | 9.8 | Jul 29 | AIT-GUI < 2.5.1 Missing Authentication via Sessions.create() |
| CVE-2026-15352 | CF Core Flight System (cFS) Health & Safety (HS) Application NASA | 7.5 | Jul 16 | NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference |
| CVE-2018-25367 | OP openVSP NASA | 6.2 | May 25 | NASA openVSP 3.16.1 Denial of Service via Buffer Overflow |
| CVE-2026-41144 | FP fprime nasa | 9.8 | Apr 21 | F´ (F Prime) has Integer Overflow in FileUplink |
| CVE-2026-5476 | CF cFS NASA | 4.6 | Apr 3 | NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow |
| CVE-2026-5475 | CF cFS NASA | 5.5 | Apr 3 | NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption |
| CVE-2026-5474 | CF cFS NASA | 8.8 | Apr 3 | NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow |
| CVE-2026-5473 | CF cFS NASA | 7.0 | Apr 3 | NASA cFS Pickle pickle.load deserialization |
| CVE-2026-22697 | CR CryptoLib nasa | 7.5 | Jan 10 | CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) |
| CVE-2026-22027 | CR CryptoLib nasa | 6.0 | Jan 10 | CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion |
| CVE-2026-22026 | CR CryptoLib nasa | 7.5 | Jan 10 | CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion |
| CVE-2026-22025 | CR CryptoLib nasa | 3.7 | Jan 10 | CryptoLib Memory Leak on HTTP Error Response in KMC Client |
| CVE-2026-22024 | CR CryptoLib nasa | 5.3 | Jan 10 | CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion |
| CVE-2026-22023 | CR CryptoLib nasa | 7.5 | Jan 10 | CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern |
| CVE-2026-21900 | CR CryptoLib nasa | 5.9 | Jan 10 | CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern |
| CVE-2026-21899 | CR CryptoLib nasa | 4.9 | Jan 10 | CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string |
| CVE-2026-21898 | CR CryptoLib nasa | 8.2 | Jan 10 | CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity |
| CVE-2026-21897 | CR CryptoLib nasa | 7.3 | Jan 10 | CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters |
| CVE-2025-64096 | CR Cryptolib Nasa | 8.8 | Oct 30 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… |
| CVE-2025-59534 | CR Cryptolib Nasa | 7.8 | Sep 23 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… |
| CVE-2025-54878 | CR Cryptolib Nasa | 8.6 | Aug 11 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… |
| CVE-2025-46675 | CR Cryptolib Nasa | 4.2 | Apr 27 | In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking |
| CVE-2025-46674 | CR Cryptolib Nasa | 9.9 | Apr 27 | NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle |
| CVE-2025-46673 | CR Cryptolib Nasa | 9.9 | Apr 27 | NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS) |
| CVE-2025-46672 | CR Cryptolib Nasa | 8.8 | Apr 27 | NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking |
| CVE-2025-30356 | CR Cryptolib Nasa | 9.8 | Apr 1 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… |
| CVE-2025-25374 | CF Core Flight System Nasa | 7.5 | Mar 25 | In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial… |
| CVE-2025-25373 | CF Core Flight System Nasa | 9.8 | Mar 25 | The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform |
| CVE-2025-25372 | CF Core Flight System Nasa | 7.5 | Mar 25 | NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module |
| CVE-2025-25371 | CF Core Flight System Nasa | 7.5 | Mar 25 | NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system |
| CVE-2024-55030 | FP Fprime Nasa | 9.8 | Mar 25 | A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands |
| CVE-2024-55029 | FP Fprime Nasa | 6.1 | Mar 25 | NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities |
| CVE-2024-55028 | FP Fprime Nasa | 9.8 | Mar 25 | A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file |
| CVE-2025-30216 | CR Cryptolib Nasa | 9.1 | Mar 25 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… |
| CVE-2025-29913 | CR Cryptolib Nasa | 9.8 | Mar 17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… |
| CVE-2025-29912 | CR Cryptolib Nasa | 9.8 | Mar 17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… |