Vendor

    NASA

    87 known vulnerabilities in products by NASA, 0 of them actively exploited (CISA KEV).

    Key figures

    87

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    18

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in NASA
    CriticalCVE-2019-1010060

    NASA CFITSIO: Buffer Overflow

    9.8
    CriticalCVE-2025-30216

    CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

    9.4
    CriticalCVE-2026-72577

    NASA Fprime-gds: Missing Authentication for Critical Function

    9.8
    HighCVE-2018-3849

    Talos NASA CFITSIO: Stack-Based Buffer Overflow

    also in 2 other products

    8.8
    HighCVE-2018-3848

    Talos NASA CFITSIO: Stack-Based Buffer Overflow

    also in 2 other products

    8.8
    CriticalCVE-2024-55030

    NASA Fprime: Command Injection

    9.8
    HighCVE-2018-3846

    Talos NASA CFITSIO: Stack-Based Buffer Overflow

    also in 2 other products

    8.8
    HighCVE-2018-3847

    NASA CFITSIO: Stack-Based Buffer Overflow

    8.8
    CriticalCVE-2026-92152

    F´: Unvalidated Port Index in GenericHub

    —
    CriticalCVE-2026-60113

    AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

    also in 1 other product

    9.8
    HighCVE-2018-1000047

    NASA Kodiak: Remote Code Execution

    8.8
    HighCVE-2018-1000048

    NASA Rt Retrieval Framework: Remote Code Execution

    8.8
    CriticalCVE-2026-60112

    AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

    also in 1 other product

    9.8
    HighCVE-2026-72579

    NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server

    7.5
    CriticalCVE-2025-29912

    CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity

    9.8
    CriticalCVE-2025-29909

    CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability

    9.8
    HighCVE-2026-92158

    F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write

    7.2
    HighCVE-2026-92154

    NASA Fprime: Integer Overflow or Wraparound

    8.1
    HighCVE-2026-79954

    NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

    —
    HighCVE-2018-1000045

    NASA Singledop: Remote Code Execution

    7.8
    HighCVE-2018-1000046

    NASA Pyblock: Remote Code Execution

    7.8
    HighCVE-2026-92150

    F´: GenericHub Malformed Buffer Assertion DoS

    7.5
    HighCVE-2026-92151

    F´: SpacePacketDeframer Small Packet Assertion DoS

    7.5
    CriticalCVE-2024-55028

    NASA Fprime: Template Injection

    9.8
    HighCVE-2026-18064

    NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

    7.5

    All vulnerabilities in search

    News

    Products

    Products by NASA
    CryptoLib280
    Fprime150
    NASA cFS80
    NASA CFITSIO70
    NASA cFS70
    Ait Core60
    Openmct60