OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-105164

LOW · CVSS 2.7 EPSS 0.54% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-04 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A vulnerability in NASA's cFS up to version 7.0.1 affects the CFE_FS_ParseInputFileNameEx function, leading to potential out-of-bounds read conditions. This flaw allows for remote exploitation, albeit with a low severity rating. Organizations utilizing this software should prioritize remediation to mitigate any risks associated with this vulnerability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-105164
Severity
LOW
CVSS
2.7
EPSS
0.54%

Original NVD Description

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.