HIGH 8.7 NVD

CVE-2026-79954

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the frame's GVCID.

References

https://fluidattacks.com/advisories/linkin
https://github.com/nasa/CryptoLib

Published: 2026-09-18 · Source: NVD · Feed updated: 2026-09-18

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-09-18 via NVD.

vulnfeed aggregates 13481 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.