Fprime Gds
Approved changes feed: RSS · Atom
cpe:2.3:a:nasa:fprime-gds:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nasa (53a37713-6109-50d8-8bfa-fbb4eca64abd) |
|---|---|
| Product | Fprime Gds (a9e35fd8-09d0-51ca-b320-54a59912e303) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-72577 |
vulnerable | 2026-09-16 04:33:09.255822 |
NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection
CRITICAL (9.8)
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprime_gds/flask/app.py applies no authentication to any endpoint.
Published: 2026-08-10T10:41:06.556Z
Updated: 2026-08-10T13:12:37.649Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.