SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-67975

HIGH · CVSS 7.5 EPSS 0.21% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-03 · Last synced 2026-09-02

CyberRota Analysis

AI-Generated

NASA cFS v7.0.1 is vulnerable due to incorrect access control, enabling attackers to manipulate subscription management by removing low-index subscriptions and adding new streams through TO_LAB commands. This could lead to unauthorized data access or disruption of service. Organizations using this version of cFS should prioritize remediation to mitigate potential exploitation risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-67975
Severity
HIGH
CVSS
7.5
EPSS
0.21%

Original NVD Description

Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TO_LAB add/remove subscription commands.