https://cvebrief.com/archive/cves/vendor/nasa/ High and critical NASA vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Sat, 19 Sep 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-79954/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-79954 Sat, 19 Sep 2026 12:00:00 GMT NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-82801/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-82801 Tue, 01 Sep 2026 12:00:00 GMT A vulnerability was detected in NASA earthdata-search 1.0.0. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-82478/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-82478 Mon, 31 Aug 2026 12:00:00 GMT A vulnerability was determined in NASA Trick 19.6.0. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-82480/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-82480 Sun, 30 Aug 2026 12:00:00 GMT A security flaw has been discovered in NASA cFS up to 7.0.1. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67973/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-67973 Thu, 27 Aug 2026 12:00:00 GMT An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67974/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-67974 Thu, 27 Aug 2026 12:00:00 GMT A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via sending a crafted packet. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67975/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-67975 Wed, 12 Aug 2026 12:00:00 GMT Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TO_LAB add/remove subscription commands. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-72577/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-72577 Tue, 11 Aug 2026 12:00:00 GMT The NASA fprime-gds application fails to implement authentication on its Flask-based endpoints, allowing unauthenticated remote attackers to execute arbitrary code and issue commands to spacecraft. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-72579/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-72579 Tue, 11 Aug 2026 12:00:00 GMT An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-21897/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-21897 Sat, 10 Jan 2026 12:00:00 GMT CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-21898/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-21898 Sat, 10 Jan 2026 12:00:00 GMT CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-22697/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2026-22697 Sat, 10 Jan 2026 12:00:00 GMT CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-64096/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2025-64096 Thu, 30 Oct 2025 12:00:00 GMT CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-59534/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2025-59534 Tue, 23 Sep 2025 12:00:00 GMT CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-54878/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-nasa-CVE-2025-54878 Mon, 11 Aug 2025 12:00:00 GMT CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station Fix documented (OSV.dev). Independent analyst report on CVE Brief.