CVE-2026-67969 describes a security flaw in the HS_MonitorApplications() function of NASA's Core Flight System (cFS) version 7.0.1. An attacker can exploit this vulnerability by providing a crafted HS.AppMon_Tbl entry, which causes the processor to reset unexpectedly. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS v3.1 base score of 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, as the processor reset disrupts normal operation but does not disclose or deny data.

The vulnerability allows an unauthenticated attacker to remotely cause the processor running NASA cFS v7.0.1 to reset by sending a maliciously crafted HS.AppMon_Tbl entry. This disrupts the integrity of the system by forcing an unexpected reset, potentially interrupting mission-critical operations. There is no impact on confidentiality or availability reported. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to interfaces that accept HS.AppMon_Tbl entries to trusted sources only. Monitor vendor channels for updates regarding patches or official mitigations.