Vendors / nasa Records 87 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 14
CVSS high 44
Exploited now nasa records in CISA KEV No nasa vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00519 · Published 2025-03-25 · No fix listed CWE-732
Priority HIGH 72
In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00491 · Published 2025-03-25 · No fix listed CWE-400
Priority HIGH 72
NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00491 · Published 2025-03-25 · No fix listed CWE-787
Priority HIGH 72
NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00615 · Published 2025-03-25 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was found in NASA cFS up to 7.0.0.
CVSS 4.0 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00393 · Published 2026-04-03 · No fix listed CWE-119
Priority MEDIUM 56
A vulnerability was determined in NASA cFS up to 7.0.0.
CVSS 4.0 MEDIUM 5.1· Adjacent network · Low privileges · No interaction · EPSS 0.00229 · Published 2026-04-03 · No fix listed CWE-119
Priority MEDIUM 44
A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit.
CVSS 4.0 LOW 2.1· Adjacent network · Low privileges · No interaction · EPSS 0.00219 · Published 2026-04-03 · No fix listed CWE-189
Priority LOW 10
A vulnerability has been found in NASA cFS up to 7.0.0.
CVSS 4.0 LOW 2.0· Local · Low privileges · No interaction · EPSS 0.00231 · Published 2026-04-03 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
14 44 27 2 0
THREATIST.IORead the docs