Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

NASA — Vulnerabilities & Security Advisories 57

Browse all 57 CVE security advisories affecting NASA. AI-powered Chinese analysis, POCs, and references for each vulnerability.

NASA operates as the United States’ civilian space agency, managing complex aerospace research, satellite communications, and planetary exploration missions. Its extensive digital infrastructure includes legacy control systems, web-facing public portals, and internal enterprise networks, creating a broad attack surface. Historically, vulnerabilities within its ecosystem have frequently involved remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from outdated software components or misconfigured web applications. While no catastrophic data breaches have publicly compromised critical mission-critical telemetry, the agency has faced scrutiny over data privacy and system integrity. The presence of thirty-four recorded CVEs highlights ongoing challenges in maintaining security across diverse, specialized technical environments. Continuous patching and rigorous access controls remain essential to protect sensitive scientific data and ensure the reliability of critical space operations against evolving cyber threats.

CVE ID Title CVSS Severity Published
CVE-2026-92160 F´: SendPartial Integer Overflow Leading to Assertion DoS — fprime CWE-190 6.5 Medium 2026-10-14
CVE-2026-92155 F´: FileUplink Unknown Packet Type Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-92150 F´: GenericHub Malformed Buffer Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-92154 F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation — fprime CWE-190 8.1 High 2026-10-14
CVE-2026-92158 F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write — fprime CWE-190 7.2 High 2026-10-14
CVE-2026-92159 F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry — fprime CWE-130 6.5 Medium 2026-10-14
CVE-2026-92156 F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge — fprime CWE-131 6.5 Medium 2026-10-14
CVE-2026-92157 F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion — fprime CWE-190 6.5 Medium 2026-10-14
CVE-2026-92152 F´: Unvalidated Port Index in GenericHub — fprime CWE-129 9.3 Critical 2026-10-14
CVE-2026-92153 F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath — fprime CWE-22 7.1 High 2026-10-14
CVE-2026-92151 F´: SpacePacketDeframer Small Packet Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds — cFS CWE-125 2.7 Low 2026-10-04
CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID — CryptoLib CWE-306 8.7 High 2026-09-18
CVE-2026-82802 NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery — earthdata-search CWE-918 5.3 Medium 2026-08-31
CVE-2026-82801 NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery — earthdata-search CWE-918 7.3 High 2026-08-31
CVE-2026-82480 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow — cFS CWE-191 7.4 High 2026-08-30
CVE-2026-82479 NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow — cFS CWE-120 6.3 Medium 2026-08-30
CVE-2026-82478 NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow — Trick CWE-121 7.3 High 2026-08-30
CVE-2026-72579 NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server — HyperCP CWE-78 7.5 High 2026-08-10
CVE-2026-72577 NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection — fprime-gds CWE-306 9.8 Critical 2026-08-10
CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference — Core Flight System (cFS) Health & Safety (HS) Application CWE-476 7.5 High 2026-07-30
CVE-2026-15352 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference — Core Flight System (cFS) Health & Safety (HS) Application CWE-476 7.5 High 2026-07-16
CVE-2018-25367 NASA openVSP 3.16.1 Denial of Service via Buffer Overflow — openVSP CWE-120 6.2 Medium 2026-05-25
CVE-2026-41144 F´ (F Prime) has Integer Overflow in FileUplink — fprime CWE-190 - - 2026-04-21
CVE-2026-5476 NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow — cFS CWE-190 4.6 Medium 2026-04-03
CVE-2026-5475 NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption — cFS CWE-119 5.5 Medium 2026-04-03
CVE-2026-5474 NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow — cFS CWE-122 6.3 Medium 2026-04-03
CVE-2026-5473 NASA cFS Pickle pickle.load deserialization — cFS CWE-502 4.5 Medium 2026-04-03
CVE-2026-22697 CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) — CryptoLib CWE-122 7.5 High 2026-01-10
CVE-2026-22027 CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion — CryptoLib CWE-122 9.8 - 2026-01-10

This page lists every published CVE security advisory associated with NASA. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.