National Oceanic and Atmospheric Administration (NOAA)

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

National Oceanic and Atmospheric Administration (NOAA) records in CISA KEV

No National Oceanic and Atmospheric Administration (NOAA) vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-38510 CVE-2025-62193 · GHSA-4rx6-3q6g-vr7j

NOAA PMEL Live Access Server (LAS) PyFerret command injection

MEDIUM 45

Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01302 Published 2026-01-15 Fixed in 8 CWE-78

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0