An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure.
History

Tue, 04 Aug 2026 11:30:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in NASA cFS CF_CFDP_RecvMd Component
Weaknesses CWE-20
CWE-22

Mon, 03 Aug 2026 22:45:00 +0000

Type Values Removed Values Added
First Time appeared Nasa
Nasa cfs
Vendors & Products Nasa
Nasa cfs

Mon, 03 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
Description An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-03T21:03:14.060Z

Reserved: 2026-07-30T00:00:00.000Z

Link: CVE-2026-67972

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T11:15:06Z