Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/nasa/cFS/issues/1057 |
|
History
Tue, 04 Aug 2026 23:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Access Control Bypass Allows Arbitrary Code Execution in NASA cFS | |
| Weaknesses | CWE-284 |
Tue, 04 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-04T20:58:25.753Z
Reserved: 2026-07-30T00:00:00.000Z
Link: CVE-2026-67979
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-08-04T22:45:03Z
Weaknesses