HIGH

CVE-2026-67972

2026-08-03 CVSS v3.1

CVSS

7.5

Description

An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure.

Weakness (CWE)

CWE-200 Information Exposure

EPSS Score

0.26%

Probability of exploitation in next 30 days

17.9th percentile

References

https://github.com/nasa/cFS https://github.com/nasa/cFS/issues/1073

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE