CVE-2026-67979

9.1 criticalEPSS 0.5%

Critical (9.1). EPSS 0.5% chance of exploitation in the next 30 days.

Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2026-08-04
Modified: 2026-08-31
Record from: the NVD, synced 2026-10-19

References

https://github.com/nasa/cFS/issues/1057
https://github.com/nasa/cFS/issues/1057

Check your stack JSON