SBN Peer Subscription Message Handling DoS in NASA cFS

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: MITRE

Description

A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via sending a crafted packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-03

Generated

2026-08-04

AI Q&A

2026-08-04

EPSS Evaluated

N/A

NVD

CVE-2026-67974

Affected Vendors & Products

Vendor	Product	Version / Range
nasa	cfs	7.0.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

A parser boundary flaw in NASA cFS v7.0.1's Software Bus Network (SBN) application allows attackers to send a crafted packet that causes a Denial of Service (DoS) by disrupting peer subscription message handling.

Impact Analysis

This vulnerability could allow attackers to disrupt the normal operation of NASA cFS v7.0.1 by causing a system crash or unresponsiveness, leading to service interruptions.

Mitigation Strategies

Update NASA cFS to the latest version to address the parser boundary flaw in SBN's peer subscription message handling.

Hi! I’m here to help you understand CVE-2026-67974. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70