Description
An incomplete fix for CVE-2026-15352 in the NASA core Flight System
(cFS) Health and Safety (HS) application leaves a separate NULL pointer
dereference reachable in versions through 7.0.1. An attacker who can
trigger the affected command under specific conditions could cause the
HS application to crash, resulting in a denial-of-service condition and
processor reset.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NASA | Core Flight System (cFS) Health & Safety (HS) Application | ≤ v7.0.1 | — |
Advisories 1
- ICSA-26-211-06 NASA Core Flight System (cFS) Health & Safety (HS) Application CISA ICS & IT advisories · Jul 30, 2026