What is the CVSS score of CVE-2026-67969?

CVE-2026-67969 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of NASA cFS are affected by CVE-2026-67969?

NASA Core Flight System v7.0.1, deployed as embedded flight software in spacecraft, contains a processor reset vulnerability exploitable through Health and Safety application configuration.

How to fix or mitigate CVE-2026-67969?

Within 24 hours: Inventory all systems running cFS v7.0.1 and classify by mission criticality; immediately audit HS.AppMon_Tbl access logs and restrict configuration modifications to authenticated, authorized personnel only. Within 7 days: Implement input validation and filtering on the HS_MonitorApplications() function to reject malformed Application Monitor table entries; deploy detailed logging and anomaly detection for all Health and Safety module operations; enforce network segmentation isolating spacecraft command uplink systems. Within 30 days: Upgrade to cFS v7.0.2 or later when vendor releases a patch, or establish a vendor-sponsored emergency patch for operationally deployed spacecraft; conduct mission impact assessment and develop tested processor reset recovery procedures.

NASA cFS CVE-2026-67969

EUVD-2026-52512 HIGH

Improper Input Validation (CWE-20)

2026-08-03 mitre

GHSA-h498-xfqm-3g8c

Information Disclosure N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

vuln.today AI

6.5 MEDIUM

Processor reset is an Availability impact (not Integrity); table upload requires at minimum low-privilege command access, so PR:L; AV:N retained as table commands are typically network-delivered.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 07, 2026 - 00:39 vuln.today

CVSS changed

Aug 06, 2026 - 22:22 NVD

7.5 (HIGH)

CVE Published

Aug 03, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 03, 2026 - 00:00 cve.org

HIGH 7.5

DescriptionCVE.org

An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl entry.

AnalysisAI

Forced processor reset in NASA Core Flight System (cFS) v7.0.1 is achievable by supplying a crafted entry to the HS.AppMon_Tbl, exploited through the HS_MonitorApplications() function in the Health and Safety application module. The vulnerability targets embedded real-time flight software used in spacecraft, where an unplanned processor reset can have mission-critical consequences. A proof-of-concept exists per SSVC data, exploitation is rated automatable, and the EPSS score of 0.14% (4th percentile) suggests no widespread opportunistic scanning - consistent with narrow, targeted exploitation in aerospace operational contexts. No active CISA KEV listing has been confirmed.

Technical ContextAI

NASA cFS (Core Flight System) is an open-source, reusable real-time embedded software framework primarily used for spaceflight missions. The HS (Health and Safety) application within cFS is responsible for monitoring the state of other applications via a configurable table - HS.AppMon_Tbl - and triggering processor resets if monitored applications fail to check in within expected timeframes. CWE-20 (Improper Input Validation) is the root cause: HS_MonitorApplications() does not sufficiently validate entries within the AppMon table before acting on them, allowing a crafted table entry to trigger a reset unconditionally. The CPE data returned is a placeholder (cpe:2.3:a:n/a:n/a:*:*:*:*:*:*:*:*), offering no additional version granularity beyond what the description provides. The GitHub issue tracker at nasa/cFS#1069 is the primary upstream reference. Notable discrepancy: the NVD-assigned CVSS vector attributes I:H (Integrity: High) and A:N (Availability: None), which is inconsistent with the described impact - a forced processor reset is fundamentally an availability disruption, not an integrity violation. This metric assignment should be treated as suspect.

RemediationAI

No vendor-released patch version has been independently confirmed from the available reference data; the upstream GitHub issue (nasa/cFS#1069) should be monitored for an official fix or tagged release. Until a patch is available, operators should apply strict input validation and access control around the HS.AppMon_Tbl table-loading process: restrict the table upload command interface to authenticated and authorized operators only, and implement onboard table validation checks that reject out-of-range or unexpected AppMon entries before they are processed by HS_MonitorApplications(). Additionally, consider disabling or hardening the HS application's reset authority in non-critical test environments where processor resets would be disruptive. In operational flight contexts, reducing the blast radius by ensuring the system can recover cleanly from a reset (warm restart capability) is a relevant compensating control, though it does not prevent the reset itself. The NVD advisory is at https://nvd.nist.gov/vuln/detail/CVE-2026-67969.