CVE-2026-75371
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software allows physically-proximate attackers with UART access to cause a Denial of Service (DoS) via a crafted input.
Risk Assessment
Attackers with physical access can disrupt satellite operations, potentially leading to communication outages.
Recommendation
Update AcubeSAT OBC software to a patched version and secure physical access to UART ports.
Other vulnerabilities in SpaceDot AcubeSAT OBC
See all- CVE-2026-75369High
An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT OBC software allows attackers to cause a Denial of Service (DoS) via a crafted CAN message.
- CVE-2026-75368High
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software allows attackers to cause a Denial of Service (DoS) via a crafted ECSS TC message.
- CVE-2026-75370Medium
An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC software allows attackers to cause a Denial of Service (DoS) via a crafted CAN message.
Original NVD description (English source)
An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service (DoS) via a crafted input.