CVE-2026-67979CWE-284broken-access-control

CVE-2026-67979

Critical · published August 5, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00498 · 41.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-08-05T01:16Z
References (2)
https://github.com/nasa/cFS/issues/1057 · [email protected]https://github.com/nasa/cFS/issues/1057 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 04 AUG 00:00Z
    Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via…
    cvelistv5