← Back to Feed

NASA Core Flight System (cFS) Health & Safety (HS) Application

CVE-2026-18064CVE-2026-15352

July 30, 2026 · CISA (US-CERT) · Severity: CRITICAL

This article covers a vulnerability in NASA's Core Flight System (cFS) Health & Safety (HS) application, tracked as CVE-2026-18064. The flaw is a NULL pointer dereference that could allow an attacker to crash the HS application, leading to a denial-of-service and processor reset. While an official fix is under development, users can mitigate the issue by updating to the latest dev branch of the HS repository.

Key Takeaways

  • CVE-2026-18064 is a NULL pointer dereference vulnerability in NASA's cFS Health & Safety application.
  • Successful exploitation could cause a denial-of-service condition and processor reset.
  • A fix is under development; users can apply a patch from the latest dev branch as a mitigation.
☕ Buy a Coffee