VulnSocial

CVE-2026-18064Patch

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to crash, resulting in a denial-of-service condition and processor reset.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-30); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-30: 1Mentions · 2026-07-31: 1Patch / Workaround · 2026-07-30: 1Technical Details · 2026-07-30: 1Technical Details · 2026-07-31: 107-3007-31
Signal classification2 categories
Patch
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-301
Patch1
2026-07-311
Disclosure1
Full discourse2 posts
  • Windows Forum@windowsforum
    Patch

    🚨 NASA’s flight-system health app can crash and reset the processor—and the “fix” is currently a developer commit. Even spacecraft software gets “works on my machine.” https://windowsforum.com/security-alerts.84/cve-2026-18064-crashes-nasa-cfs-health-app-fix-is-dev-commit.440957/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #EmbeddedSecurity #CisaAdvisories #NasaCfs #Cve202618064 https://t.co/v1sReFV5tj

    Post summary

    The tweet announces a discovered crash vulnerability in NASA’s flight‑system health app (CVE‑2026‑18064) and notes that a developer commit serves as the patch, but no exploit details or active exploitation reports are mentioned.

    0101150
    1.3K followersView on X
  • Aviatrix Threat Research Center@aviatrixtrc
    Disclosure

    TRC analysis reveals CVE-2026-18064 in NASA's Core Flight System stems from an incomplete fix of a previous vulnerability. Attackers can trigger NULL pointer dereference to crash the Health & Safety application, creating denial-of-service conditions in space mission systems. #Vulnerability 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/nasa-core-flight-system-health-safety-application-cve-2026-18064

    Post summary

    The analysis discloses a new vulnerability, CVE‑2026‑18064, in NASA's Core Flight System that allows attackers to trigger a NULL pointer dereference, causing a crash of the Health & Safety application and leading to a denial‑of‑service condition.

    0000064
    1.9K followersView on X

Explore more

Back to dashboard