Security & Threat Intelligence · 16.07.2026, 16:21 UTC
NASA Core Flight System (cFS) Health & Safety (HS) Application
| Schweregrad | info |
|---|---|
| CVE | ↗ |
| Kategorie | Security & Threat Intelligence |
| Quelle | CISA ICS Advisories · CISA Advisories ↗ |
| Veröffentlicht | 16.07.2026 UTC |
Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Betroffene Kennungen: CVE-2026-15352. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. The following versions of NASA Core Flight System (cFS) Health & Safety (HS) Application are affected:
Core Flight System (cFS) Health & Safety (HS) Application
CVSS Vendor Equipment Vulnerabilities
v3 7.5 NASA NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
Background
Critical Infrastructure Sectors: Transportation Systems Countries/Areas Deployed: Worldwide Company Headquarters Location: United States
Vulnerabilities
Expand All +
CVE-2026-15352
A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the application to crash via segmentation fault when processing a routine Housekeeping Telemetry request, leading to denial of service. View CVE Details
Affected Products NASA Core Flight System (cFS) Health & Safety (HS) Application
Vendor:NASA Product Version:NASA Core Flight System (cFS) Health & Safety (HS) Application: <v7.0.1 Product Status:known_affected
Remediations MitigationNASA recommends users update to v7.0.1 (https://github.com/nasa/HS/releases/tag/v7.0.1)https://github.com/nasa/HS/releases/tag/v7.0.1
Relevant CWE: CWE-476 NULL Pointer Dereference
Metrics
CVSS Version Base Score Base Severity Vector String
3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 8.2 HIGH CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Acknowledgments
Grady DeRosa reported this vulnerability to CISA
Legal Notice and …