CVE-2026-67972

Published: Aug 3, 2026Modified: Aug 31, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (3)

https://github.com/nasa/cFS

Source: cve@mitre.org

https://github.com/nasa/cFS/issues/1073

Source: cve@mitre.org

https://github.com/nasa/cFS/issues/1073

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.