CVE-2026-75370
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software allows attackers to cause a Denial of Service (DoS) via a crafted CAN message.
Risk Assessment
Attackers can disrupt satellite operations, potentially leading to communication outages or loss of control.
Recommendation
Update AcubeSAT OBC software to a patched version or restrict access to the CAN network.
Other vulnerabilities in SpaceDot AcubeSAT OBC
See all- CVE-2026-75369High
An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software allows attackers to cause a Denial of Service (DoS) via a crafted CAN message.
- CVE-2026-75368High
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software allows attackers to cause a Denial of Service (DoS) via a crafted ECSS TC message.
- CVE-2026-75371High
An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software allows physically-proximate attackers with UART access to cause a Denial of Service (DoS) via a crafted input.
Original NVD description (English source)
An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (DoS) via supplying a crafted CAN message.