CVE-2026-92154

Status: DeferredHigh (8.1)—

Severity8.1High · CVSS 3.1

Exploitation probability0.56 %higher than 46% of CVEs

Active exploitationNonot in the CISA catalog

Public exploitNot knownno public code found

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic and then seeks to the large attacker-controlled offset before writing. When a file-uplink DATA packet supplies a byteOffset and dataSize whose unsigned sum wraps below the declared file size, data can be written beyond the declared upload size, causing file integrity loss and potentially large sparse-file growth or resource exhaustion. This issue is fixed in version 4.2.0.

CVSS

Base score: 8.1
Version: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.56 %
Percentile among all scored CVEs: 46
Score date: 10/20/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1210 Exploitation of Remote Serviceslateral movement85 %
Primary impactT1565 Data Manipulationimpact70 %
Secondary impactT1499 Endpoint Denial of Serviceimpact50 %

El vector AV:N/PR:L/UI:N exige privilegios por red (T1210). El texto cita pérdida de integridad del fichero subido (T1565) y posible agotamiento de recursos (T1499). No hay ejecución de comandos, así que se omite T1059.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

ATT&CK mitigations that cover these techniques

Network Segmentation Vulnerability Scanning Threat Intelligence Program Restrict File and Directory Permissions Privileged Account Management Remote Data Storage

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

F Prime — F Prime^AI

CWEs

CWE-190

References

Show 4 references

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-92154",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-92154",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-10-15T18:54:50.578904Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "nasa",
          "product": "fprime",
          "versions": [
            {
              "status": "affected",
              "version": "< 4.2.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-10-14T18:19:34.630",
  "references": [
    {
      "url": "https://github.com/nasa/fprime/commit/cacdd555456bd83ab395b521d56c0330470ea798",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/nasa/fprime/pull/4919",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/nasa/fprime/security/advisories/GHSA-wx8q-q5gx-f54p",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/nasa/fprime/security/advisories/GHSA-wx8q-q5gx-f54p",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic and then seeks to the large attacker-controlled offset before writing. When a file-uplink DATA packet supplies a byteOffset and dataSize whose unsigned sum wraps below the declared file size, data can be written beyond the declared upload size, causing file integrity loss and potentially large sparse-file growth or resource exhaustion. This issue is fixed in version 4.2.0."
    }
  ],
  "lastModified": "2026-10-15T19:17:48.477",
  "sourceIdentifier": "security-advisories@github.com"
}