HIGH

CVE-2026-67970

2026-08-03 CVSS v3.1

CVSS

7.5

Description

Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal.

Weakness (CWE)

CWE-284 Improper Access Control

EPSS Score

0.23%

Probability of exploitation in next 30 days

14.4th percentile

References

https://github.com/nasa/cFS/issues/1072

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE