CVE-2026-67979

—

CVSS 3.1

9.1 critical

EPSS

<1%p21

Published

Aug 4, 2026 (Aug 4, 2026)

Modified

Aug 31, 2026

Description

Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a shared object on target storage.

Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.