A vulnerability was identified in NASA cFS up to 7.0.1. (CVE-2026-82479)

CVE-2026-82479 is a buffer overflow vulnerability in NASA Core Flight System (cFS) up to version 7.0.1. It affects the OS_read function in the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the SBN TCP Module component. The vulnerability is triggered by manipulation of the MsgSz argument, leading to a buffer overflow condition. Exploitation requires local network access. The vendor has not provided any response or patch for this issue.

Successful exploitation can lead to memory corruption resulting in limited confidentiality, integrity, and availability impacts. The CVSS vector indicates the attack requires local network access with low attack complexity and no privileges or user interaction needed. The impact includes partial loss of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should restrict local network access to the affected component and monitor for unusual activity until an official patch or mitigation is released.