NASA Core Flight System (cFS) Health & Safety (HS) Application
Summary
NASA's Core Flight System (cFS) Health & Safety (HS) Application versions up to v7.0.1 are affected by a NULL pointer dereference vulnerability (CVE-2026-18064). Successful exploitation can lead to a denial-of-service condition and processor reset.
IFF Assessment
FOE
This vulnerability allows an attacker to cause a denial-of-service, disrupting critical systems.
Severity
7.5
High
Defender Context
This vulnerability in NASA's Core Flight System affects critical infrastructure, specifically transportation systems. Defenders should monitor for exploitation attempts and ensure systems are updated to the latest dev branch of the HS application as an interim mitigation while awaiting an official fix.