N
Vendor security profile
nasa
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs16
Critical3
CISA KEV0
Public exploit6
Patch rate%25
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
4
0
0
2
7
1
1
CVE KEV
CVE severity distribution
16toplam CVE
Critical3 (19%)
High5 (31%)
Medium8 (50%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%38
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
7.3
CVE-2026-108744
pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync
M
Patch status unknownEPSS %1
5.1
CVE-2026-105164
NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds
N
Patch verifiedEPSS %1
9.8
CVE-2026-105105
Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
N
Patch status unknownEPSS %1
8.7
CVE-2026-79954
NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
N
Patch status unknownEPSS %1
8.7
CVE-2026-75584
ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion
N
Patch status unknownEPSS %1
8.7
CVE-2026-84484
ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv
N
Patch verifiedEPSS %1
6.9
CVE-2026-82802
NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery
N
Patch status unknownEPSS %0
6.9
CVE-2026-82801
NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery
N
Patch status unknownEPSS %0
5.3
CVE-2026-82480
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow
N
Patch status unknownEPSS %0
5.3
CVE-2026-82479
NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
N
Patch status unknownEPSS %0