CVE-2026-67969

Received Received - Intake

Processor Reset Vulnerability in NASA cFS

Publication date: 2026-08-03

Last updated on: 2026-08-06

Assigner: MITRE

Description

An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMon_Tbl entry.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-06

Generated

2026-08-24

AI Q&A

2026-08-04

EPSS Evaluated

2026-08-22

NVD

CVE-2026-67969

EUVD

EUVD-2026-52512

Affected Vendors & Products

Vendor	Product	Version / Range
nasa	cfs	7.0.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is in the HS_MonitorApplications() function of NASA cFS version 7.0.1. It allows attackers to cause the processor to reset by providing a maliciously crafted HS.AppMon_Tbl entry.

Impact Analysis

An attacker could exploit this to force a system reset, potentially causing denial of service or disrupting critical operations if the affected system is part of a larger infrastructure.

Compliance Impact

This vulnerability does not provide sufficient information to determine its impact on compliance with standards like GDPR or HIPAA. The issue involves a forced processor reset via a crafted entry, which may disrupt system availability but lacks details on data exposure or processing integrity.

Mitigation Strategies

Update NASA cFS to a version that patches the HS_MonitorApplications() component vulnerability. Review and restrict access to the HS.AppMon_Tbl entry configuration to prevent unauthorized modifications.

Hi! I’m here to help you understand CVE-2026-67969. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70