Is CVE-2026-82479 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82479 being exploited in the wild.

How severe is CVE-2026-82479?

Medium severity, with a CVSS score of 6.3, published 30 August 2026.

Is there a fix for CVE-2026-82479?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-82479 attacked?

It is attacked from the adjacent network.

Am I affected by CVE-2026-82479?

Check whether you run Nasa cFS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82479: NASA cFS buffer overflow in SBN TCP Module

CVE-2026-82479 · Severity: medium · CVSS 6.3 · Published 2026-08-30

NASA's cFS (core Flight Software) is a reusable flight software framework used in spacecraft and aerospace systems. A buffer overflow vulnerability in the TCP networking module could allow an attacker on the local network to crash the system or potentially execute arbitrary code, compromising mission-critical operations.

Vendors: Nasa.

Quick answers

Is CVE-2026-82479 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82479 being exploited in the wild.
How severe is CVE-2026-82479?: Medium severity, with a CVSS score of 6.3, published 30 August 2026.
Which products and versions are affected?: Nasa cFS up to 7.0.1.
Is there a fix for CVE-2026-82479?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-82479 attacked?: It is attacked from the adjacent network.
Am I affected by CVE-2026-82479?: Check whether you run Nasa cFS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A buffer overflow vulnerability exists in the OS_read function of the SBN (Software Bus Network) TCP Module in modules/protocol/tcp/fsw/src/sbn_tcp_if.c. The vulnerability is triggered through improper handling of the MsgSz argument, which fails to validate input size before writing to a buffer. The attack vector is adjacent network, requiring the attacker to be on the local network. An attacker can cause a denial of service or potentially achieve code execution. No patch availability information is currently available; the vendor was contacted early but did not respond.

Affected products

NASA cFS up to 7.0.1

Timeline

2026-08-30: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.