Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

NASA — Vulnerabilities & Security Advisories 57

Browse all 57 CVE security advisories affecting NASA. AI-powered Chinese analysis, POCs, and references for each vulnerability.

NASA operates as the United States’ civilian space agency, managing complex aerospace research, satellite communications, and planetary exploration missions. Its extensive digital infrastructure includes legacy control systems, web-facing public portals, and internal enterprise networks, creating a broad attack surface. Historically, vulnerabilities within its ecosystem have frequently involved remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from outdated software components or misconfigured web applications. While no catastrophic data breaches have publicly compromised critical mission-critical telemetry, the agency has faced scrutiny over data privacy and system integrity. The presence of thirty-four recorded CVEs highlights ongoing challenges in maintaining security across diverse, specialized technical environments. Continuous patching and rigorous access controls remain essential to protect sensitive scientific data and ensure the reliability of critical space operations against evolving cyber threats.

Found 12 results / 57 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-92160 F´: SendPartial Integer Overflow Leading to Assertion DoS — fprime CWE-190 6.5 Medium 2026-10-14
CVE-2026-92155 F´: FileUplink Unknown Packet Type Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-92150 F´: GenericHub Malformed Buffer Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-92154 F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation — fprime CWE-190 8.1 High 2026-10-14
CVE-2026-92158 F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write — fprime CWE-190 7.2 High 2026-10-14
CVE-2026-92159 F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry — fprime CWE-130 6.5 Medium 2026-10-14
CVE-2026-92156 F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge — fprime CWE-131 6.5 Medium 2026-10-14
CVE-2026-92157 F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion — fprime CWE-190 6.5 Medium 2026-10-14
CVE-2026-92152 F´: Unvalidated Port Index in GenericHub — fprime CWE-129 9.3 Critical 2026-10-14
CVE-2026-92153 F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath — fprime CWE-22 7.1 High 2026-10-14
CVE-2026-92151 F´: SpacePacketDeframer Small Packet Assertion DoS — fprime CWE-617 7.5 High 2026-10-14
CVE-2026-41144 F´ (F Prime) has Integer Overflow in FileUplink — fprime CWE-190 - - 2026-04-21

This page lists every published CVE security advisory associated with NASA. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.