CVE-2025-25373

9.8 criticalEPSS 0.5%

Critical (9.8) in nasa core flight system. EPSS 0.5% chance of exploitation in the next 30 days.

The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2025-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19