CVE-2026-79954— NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
Quick assessment
Affected
NASA CryptoLib
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NASA CryptoLib 1.5.0 中存在一个认证降级漏洞，该漏洞位于遥控（Telecommand, TC）接收路径中。接收方仅依据入帧中的安全参数索引（SPI）字段来选择用于 SDLS 处理的安全关联（Security Association, SA），但未验证所选择的 SA 是否被授权用于该帧的组虚拟信道标识符（GVCID）。
Possible ATT&CK Techniques 2 AI
T1558.004 · AS-REP Roasting T1557.001 · Name Resolution Poisoning and SMB Relay
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79954
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
Source: CVE Program / CVE List V5
Vulnerability Description
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the frame's GVCID.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-79954
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79954
请登录查看更多情报信息。
Other References for CVE-2026-79954 (2)
IV. Related Vulnerabilities
Same product: CryptoLib
-
CVE-2026-22697
CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base -
CVE-2026-22027
CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA H -
CVE-2026-22026
CryptoLib Unbounded Memory Allocation in KMC HTTP Response H -
CVE-2026-22025
CryptoLib Memory Leak on HTTP Error Response in KMC Client -
CVE-2026-22024
CryptoLib Memory Leak in KMC Encrypt Function Leads to Resou
Same vendor: NASA
-
CVE-2026-82802
NASA earthdata-search granules Endpoint handler.js OpenSearc -
CVE-2026-82801
NASA earthdata-search scale Endpoint handler.js scaleImage s -
CVE-2026-82480
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLe -
CVE-2026-82479
NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow -
CVE-2026-82478
NASA Trick TCP Socket JSONVariableServerThread.cpp parse_req
Same weakness: CWE-306
-
CVE-2026-85889
Azure AI Foundry Elevation of Privilege Vulnerability -
CVE-2026-54767
WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction -
CVE-2026-54460
OpenReception: Unauthenticated WebAuthn passkey injection vi -
CVE-2026-54618
Obsidian Web MCP: Unauthenticated vault access: /oauth/autho -
CVE-2026-54504
MCP Documentation Server: Web UI API binds to all interfaces
V. Comments for CVE-2026-79954
No comments yet