CVE-2026-67975 Details
Description
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TO_LAB add/remove subscription commands.
A vulnerability in NASA's Core Flight System (cFS) version 7.0.1 has been identified, allowing attackers to manipulate subscription management in the TO_LAB application. The issue arises from incorrect access control, which enables the removal of low-index subscriptions and the addition of new streams by sending TO_LAB add/remove subscription commands. This vulnerability disrupts the application's ability to manage telemetry forwarding subscriptions effectively, leading to potential data handling issues.
A pull request has been made to address this vulnerability by compacting the subscription array in the TO_LAB_RemovePacketCmd function, ensuring that removed subscriptions are properly managed and reused.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/nasa/cFS/issues/1076 | CISA-ADP | |
| https://github.com/nasa/cFS | [email protected] | |
| https://github.com/nasa/cFS/issues/1076 | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-284 | Improper Access Control | CISA-ADP |
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 6, 2026 | CVE Modified | CISA-ADP |
| Aug 3, 2026 | New CVE Received | [email protected] |