CVE-2026-5473
MediumCVSS 4.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
NASA cFS up to version 7.0.0 has a vulnerability in the function pickle.load in the Pickle Module component that leads to deserialization. The attack requires local access and is considered difficult to exploit. The project was informed but has not responded.
Risk Assessment
Deserialization could allow an attacker to execute arbitrary code or manipulate data, but due to high complexity and required local access, the risk is limited.
Recommendation
Monitor vendor updates and apply patches when available. Restrict local access to the system.
Other vulnerabilities in NASA cFS
See all- CVE-2026-67979Critical
In NASA cFS v7.0.1, the Executive Services dynamic application start path component has incorrect access control. An attacker can place a shared object on target storage, allowing arbitrary code execution.
- CVE-2026-82480High
A vulnerability was discovered in NASA cFS up to 7.0.1, affecting the CFE_SB_GetUserDataLength function in cfe_sb_util.c of the cFE Software Bus component. Manipulating TotalMsgSize/HdrSize results in integer underflow. The attack can be initiated remotely, and the vendor did not respond.
- CVE-2026-82479Medium
A vulnerability was identified in NASA cFS up to 7.0.1, affecting the OS_read function in sbn_tcp_if.c of the SBN TCP Module. Manipulating the MsgSz argument leads to buffer overflow. The attack must be carried out from within the local network. The vendor did not respond.
- CVE-2026-67978High
The SBN UDP interface in NASA cFS v7.0.1 allows an attacker to cause a Denial of Service (DoS) by sending a crafted SBN frame.
- CVE-2026-67975High
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TO_LAB add/remove subscription commands.
- CVE-2026-67974High
A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via sending a crafted packet.
- CVE-2026-67973High
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs.
- CVE-2026-67970High
Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal.
- CVE-2026-67969High
An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl entry.
- CVE-2026-67972High
An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to control where received content and data is stored, possibly leading to an information disclosure.
Original NVD description (English source)
A vulnerability has been found in NASA cFS up to 7.0.0. The impacted element is the function pickle.load of the component Pickle Module. Such manipulation leads to deserialization. The attack needs to be performed locally. The attack requires a high level of complexity. The exploitability is regarded as difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS