CVE-2026-75371: SpaceDot AcubeSAT OBC software vulnerability

Published Aug 24, 2026

Updated

An integer handling flaw in the cobsdecode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service (DoS) via a crafted input.

Affected Software

1 affected component

SpaceDot AcubeSAT OBC software

Event History

Aug 24, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

Who can realistically exploit this issue?

An attacker must be physically proximate and have access to the device's UART interface. Remote-only access is not identified as an exploitation path in the available information.

What is the expected impact of successful exploitation?

A crafted input sent through UART can trigger a denial of service in the affected software.

How can I determine whether my deployment is affected?

Verify whether the SpaceDot AcubeSAT OBC software in use includes commit eaf90ec, which is identified as containing the flawed cobs_decode function.

CVE-2026-75371: SpaceDot AcubeSAT OBC software vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can realistically exploit this issue?

What is the expected impact of successful exploitation?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can realistically exploit this issue?

What is the expected impact of successful exploitation?

How can I determine whether my deployment is affected?