Vendor
NASA
87 known vulnerabilities in products by NASA, 0 of them actively exploited (CISA KEV).
Key figures
87
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
18
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-1010060 | NASA CFITSIO: Buffer Overflow | 9.8 | |
| Critical | CVE-2025-30216 | CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length | 9.4 | |
| Critical | CVE-2026-72577 | NASA Fprime-gds: Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2018-3849 | Talos NASA CFITSIO: Stack-Based Buffer Overflow | 8.8 | |
| High | CVE-2018-3848 | Talos NASA CFITSIO: Stack-Based Buffer Overflow | 8.8 | |
| Critical | CVE-2024-55030 | NASA Fprime: Command Injection | 9.8 | |
| High | CVE-2018-3846 | Talos NASA CFITSIO: Stack-Based Buffer Overflow | 8.8 | |
| High | CVE-2018-3847 | NASA CFITSIO: Stack-Based Buffer Overflow | 8.8 | |
| Critical | CVE-2026-92152 | F´: Unvalidated Port Index in GenericHub | — | |
| Critical | CVE-2026-60113 | AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes | 9.8 | |
| High | CVE-2018-1000047 | NASA Kodiak: Remote Code Execution | 8.8 | |
| High | CVE-2018-1000048 | NASA Rt Retrieval Framework: Remote Code Execution | 8.8 | |
| Critical | CVE-2026-60112 | AIT-GUI < 2.5.1 Missing Authentication via Sessions.create() | 9.8 | |
| High | CVE-2026-72579 | NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server | 7.5 | |
| Critical | CVE-2025-29912 | CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity | 9.8 | |
| Critical | CVE-2025-29909 | CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability | 9.8 | |
| High | CVE-2026-92158 | F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write | 7.2 | |
| High | CVE-2026-92154 | NASA Fprime: Integer Overflow or Wraparound | 8.1 | |
| High | CVE-2026-79954 | NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID | — | |
| High | CVE-2018-1000045 | NASA Singledop: Remote Code Execution | 7.8 | |
| High | CVE-2018-1000046 | NASA Pyblock: Remote Code Execution | 7.8 | |
| High | CVE-2026-92150 | F´: GenericHub Malformed Buffer Assertion DoS | 7.5 | |
| High | CVE-2026-92151 | F´: SpacePacketDeframer Small Packet Assertion DoS | 7.5 | |
| Critical | CVE-2024-55028 | NASA Fprime: Template Injection | 9.8 | |
| High | CVE-2026-18064 | NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference | 7.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,