CVE-2026-67972: Nasa cFS vulnerability

Published Aug 3, 2026

Updated

An issue in the CFCFDPRecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure.

Affected Software

1 affected component

nasa cFS=7.0.1

Event History

Aug 3, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:16 PM

Description

Frequently Asked Questions

What is the severity of CVE-2026-67972?

CVE-2026-67972 has a risk rating of 33, indicating a moderate level of severity.

How do I fix CVE-2026-67972?

To mitigate CVE-2026-67972, ensure you update to the latest version of NASA cFS that addresses this vulnerability.

What specific issue does CVE-2026-67972 involve?

CVE-2026-67972 involves an issue in the CF_CFDP_RecvMd() component that allows attackers to control the storage location of received content and data.

What could be the potential impact of CVE-2026-67972?

The potential impact of CVE-2026-67972 includes unauthorized information disclosure due to improper storage control.

When was CVE-2026-67972 published?

CVE-2026-67972 was published on August 3, 2026.

CVE-2026-67972: Nasa cFS vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-67972?

How do I fix CVE-2026-67972?

What specific issue does CVE-2026-67972 involve?

What could be the potential impact of CVE-2026-67972?

When was CVE-2026-67972 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-67972?

How do I fix CVE-2026-67972?

What specific issue does CVE-2026-67972 involve?

What could be the potential impact of CVE-2026-67972?

When was CVE-2026-67972 published?