What is CVE-2026-18064?

CVE-2026-18064 is a high-severity vulnerability in Nasa Core Flight System (Cfs) Health & Safety (Hs) Application, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2026-07-30.

How severe is CVE-2026-18064?

High severity. CVSS v3 base score is 7.5 out of 10.

NULL pointer dereference in Nasa Core Flight System (Cfs) Health & Safety (Hs) Application

CVE-2026-18064

An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected comman…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Nasa Core Flight System (Cfs) Health & Safety (Hs) Application — versions 0

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2026-18064?: CVE-2026-18064 is a high-severity vulnerability in Nasa Core Flight System (Cfs) Health & Safety (Hs) Application, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2026-07-30.
How severe is CVE-2026-18064?: High severity. CVSS v3 base score is 7.5 out of 10.