# National Security Agency vulnerabilities Source: https://junglewise.ai/threats/vendors/national-security-agency Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/national-security-agency.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 25 vulnerabilities in National Security Agency: 0 in the last 7 days and 8 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-115503, was published on 22 October 2026. 4 vulnerabilities in the last four weeks, up 33% on the four before (3). 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 4 - Last 90 days: 8 - All time: 25 (0 critical, 0 exploited in the wild) ## About National Security Agency United States federal intelligence and cryptography agency. ## Latest National Security Agency vulnerabilities - [CVE-2026-115503: Ghidra zip bomb in extension extraction](https://junglewise.ai/threats/cve-2026-115503-ghidra-before-12-2-contains-an-improper-handling-of-highly) (medium, CVSS 5.5, published 22 Oct 2026) - [CVE-2026-115397: Ghidra resource allocation without limits in extension extraction](https://junglewise.ai/threats/cve-2026-115397-ghidra-before-12-2-contains-a-resource-allocation-without-limits) (medium, CVSS 5.5, published 22 Oct 2026) - [CVE-2026-115396: Ghidra zip bomb vulnerability in theme import](https://junglewise.ai/threats/cve-2026-115396-ghidra-10-3-before-12-2-contains-an-improper-handling-of-highly) (medium, CVSS 5.5, published 22 Oct 2026) - [CVE-2026-115395: Ghidra resource exhaustion in theme ZIP extraction](https://junglewise.ai/threats/cve-2026-115395-ghidra-10-3-before-12-2-contains-a-resource-allocation-without) (medium, CVSS 5.5, published 22 Oct 2026) - [CVE-2026-100505: National Security Agency Ghidra heap out-of-bounds read in StringManager](https://junglewise.ai/threats/cve-2026-100505-ghidra-versions-11-2-through-12-1-4-contain-a-heap-out-of-bounds) (medium, CVSS 4.4, published 26 Sep 2026) - [CVE-2026-100504: Ghidra stack-based buffer overflow in decompiler leftshift128 function](https://junglewise.ai/threats/cve-2026-100504-ghidra-versions-through-12-1-4-contain-a-stack-based-out-of) (high, CVSS 7, published 26 Sep 2026) - [CVE-2026-96273: National Security Agency Ghidra improper input validation in OptionsDB](https://junglewise.ai/threats/cve-2026-96273-ghidra-before-12-1-4-fails-to-validate-the-type-col-byte-in) (medium, CVSS 5.5, published 23 Sep 2026) - [CVE-2026-54389: National Security Agency Ghidra uncontrolled resource consumption in PDB parser](https://junglewise.ai/threats/cve-2026-54389-national-security-agency-ghidra-uncontrolled-resource-consumption) (medium, CVSS 5.5, published 20 Aug 2026) - [CVE-2026-52759: NSA Ghidra denial of service in Mach-O binary parser](https://junglewise.ai/threats/cve-2026-52759-nsa-ghidra-denial-of-service-in-mach-o-binary-parser) (medium, CVSS 5.5, published 10 Jun 2026) - [CVE-2026-52758: NSA Ghidra SQL injection in BSim search filters](https://junglewise.ai/threats/cve-2026-52758-nsa-ghidra-sql-injection-in-bsim-search-filters) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-52757: NSA Ghidra heap use-after-free in decompiler HighVariable::merge](https://junglewise.ai/threats/cve-2026-52757-nsa-ghidra-heap-use-after-free-in-decompiler-highvariable-merge) (medium, CVSS 4.4, published 10 Jun 2026) - [CVE-2026-52756: NSA Ghidra path traversal in Debugger IsfServer](https://junglewise.ai/threats/cve-2026-52756-nsa-ghidra-path-traversal-in-debugger-isfserver) (medium, CVSS 4.8, published 10 Jun 2026) - [CVE-2026-52755: NSA Ghidra path traversal in theme import](https://junglewise.ai/threats/cve-2026-52755-nsa-ghidra-path-traversal-in-theme-import) (high, CVSS 7.8, published 10 Jun 2026) - [CVE-2026-52754: NSA Ghidra Server authentication bypass in PKIAuthenticationModule](https://junglewise.ai/threats/cve-2026-52754-nsa-ghidra-server-authentication-bypass-in) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-52753: NSA Ghidra out-of-memory vulnerability in Rust demangler](https://junglewise.ai/threats/cve-2026-52753-nsa-ghidra-out-of-memory-vulnerability-in-rust-demangler) (medium, CVSS 5.5, published 10 Jun 2026) - [CVE-2026-52752: NSA Ghidra path traversal in extension installer](https://junglewise.ai/threats/cve-2026-52752-nsa-ghidra-path-traversal-in-extension-installer) (high, CVSS 7.8, published 10 Jun 2026) - [CVE-2026-52751: NSA Ghidra unsafe deserialization in Shared-Project RMI connection](https://junglewise.ai/threats/cve-2026-52751-nsa-ghidra-unsafe-deserialization-in-shared-project-rmi) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-52750: NSA Ghidra command injection in URL annotation handling on Windows](https://junglewise.ai/threats/cve-2026-52750-nsa-ghidra-command-injection-in-url-annotation-handling-on) (high, CVSS 7.8, published 10 Jun 2026) - [CVE-2026-49498: NSA Ghidra SQL injection in BSim PostgresFunctionDatabase](https://junglewise.ai/threats/cve-2026-49498-nsa-ghidra-sql-injection-in-bsim-postgresfunctiondatabase) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-49497: NSA Ghidra path traversal in SameDirDebugInfoProvider](https://junglewise.ai/threats/cve-2026-49497-nsa-ghidra-path-traversal-in-samedirdebuginfoprovider) (low, CVSS 3.3, published 10 Jun 2026) - [CVE-2026-49496: NSA Ghidra heap-use-after-free in SleighBuilder::generatePointerAdd](https://junglewise.ai/threats/cve-2026-49496-nsa-ghidra-heap-use-after-free-in-sleighbuilder) (medium, CVSS 6.1, published 10 Jun 2026) - [CVE-2026-49495: NSA Ghidra denial of service in Mach-O ExportTrie parser](https://junglewise.ai/threats/cve-2026-49495-nsa-ghidra-denial-of-service-in-mach-o-exporttrie-parser) (medium, CVSS 5.5, published 10 Jun 2026) - [CVE-2024-58350: NSA Ghidra use after free in Sleigh backend shutdown](https://junglewise.ai/threats/cve-2024-58350-nsa-ghidra-use-after-free-in-sleigh-backend-shutdown) (low, CVSS 2.9, published 10 Jun 2026) - [CVE-2026-6807: NSA GRASSMARLIN XML External Entity reference in session data processing](https://junglewise.ai/threats/cve-2026-6807-nsa-grassmarlin) (high, CVSS 5.5, published 28 Apr 2026) - [CVE-2026-4946: National Security Agency Ghidra arbitrary code execution via @execute annotation](https://junglewise.ai/threats/cve-2026-4946-national-security-agency-ghidra-arbitrary-code-execution-via) (high, CVSS 8.8, published 29 Mar 2026) ## Most severe National Security Agency vulnerabilities - [CVE-2026-4946: National Security Agency Ghidra arbitrary code execution via @execute annotation](https://junglewise.ai/threats/cve-2026-4946-national-security-agency-ghidra-arbitrary-code-execution-via) (high, CVSS 8.8, published 29 Mar 2026) - [CVE-2026-52758: NSA Ghidra SQL injection in BSim search filters](https://junglewise.ai/threats/cve-2026-52758-nsa-ghidra-sql-injection-in-bsim-search-filters) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-52754: NSA Ghidra Server authentication bypass in PKIAuthenticationModule](https://junglewise.ai/threats/cve-2026-52754-nsa-ghidra-server-authentication-bypass-in) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-52751: NSA Ghidra unsafe deserialization in Shared-Project RMI connection](https://junglewise.ai/threats/cve-2026-52751-nsa-ghidra-unsafe-deserialization-in-shared-project-rmi) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-49498: NSA Ghidra SQL injection in BSim PostgresFunctionDatabase](https://junglewise.ai/threats/cve-2026-49498-nsa-ghidra-sql-injection-in-bsim-postgresfunctiondatabase) (high, CVSS 8.8, published 10 Jun 2026) - [CVE-2026-52755: NSA Ghidra path traversal in theme import](https://junglewise.ai/threats/cve-2026-52755-nsa-ghidra-path-traversal-in-theme-import) (high, CVSS 7.8, published 10 Jun 2026) - [CVE-2026-52752: NSA Ghidra path traversal in extension installer](https://junglewise.ai/threats/cve-2026-52752-nsa-ghidra-path-traversal-in-extension-installer) (high, CVSS 7.8, published 10 Jun 2026) - [CVE-2026-52750: NSA Ghidra command injection in URL annotation handling on Windows](https://junglewise.ai/threats/cve-2026-52750-nsa-ghidra-command-injection-in-url-annotation-handling-on) (high, CVSS 7.8, published 10 Jun 2026) - [CVE-2026-100504: Ghidra stack-based buffer overflow in decompiler leftshift128 function](https://junglewise.ai/threats/cve-2026-100504-ghidra-versions-through-12-1-4-contain-a-stack-based-out-of) (high, CVSS 7, published 26 Sep 2026) - [CVE-2026-6807: NSA GRASSMARLIN XML External Entity reference in session data processing](https://junglewise.ai/threats/cve-2026-6807-nsa-grassmarlin) (high, CVSS 5.5, published 28 Apr 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, up 33% on the four before (3). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 3 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 4 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## National Security Agency technologies - [National Security Agency Ghidra](https://junglewise.ai/threats/technologies/ghidra): 23 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "National Security Agency vulnerabilities", https://junglewise.ai/threats/vendors/national-security-agency, 11 November 2026.