core flight system vulnerabilities and fixes

Recent CVEs affecting core flight system, with upgrade or downgrade steps. 4 tracked.

Also searched as: coreflightsystem.

core flight system has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-04-03. Highest priority: CVE-2026-5474 (score 30/100).

• CVE-2026-5474 MEDIUM 6.3 UPGRADE A vulnerability was found in NASA cFS up to 7.0.0
• CVE-2026-5473 MEDIUM 4.5 UPGRADE A vulnerability has been found in NASA cFS up to 7.0.0
• CVE-2026-5475 MEDIUM 5.5 UPGRADE A vulnerability was determined in NASA cFS up to 7.0.0
• CVE-2026-5476 MEDIUM 4.6 UPGRADE A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit

FAQ

How do I fix core flight system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is core flight system being exploited right now?

None of the tracked core flight system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which core flight system CVE should I patch first?

CVE-2026-5474 currently ranks highest (30/100): A vulnerability was found in NASA cFS up to 7.0.0.

RSS feed for core flight system · ← Back to latest CVEs