CVE-2026-18064 in Core Flight System Health & Safety Applicationinfo

Zusammenfassung

von MITRE • 31.07.2026

An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to crash, resulting in a denial-of-service condition and processor reset.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Zuständig

Icscert

Reservieren

28.07.2026

Veröffentlichung

31.07.2026

Moderieren

akzeptiert

Eintrag

VDB-384962

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!