CVE-2025-25374: Nasa Core Flight System

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service.

Affected products

• Nasa Core Flight System: version 6.7.0 only

Published 2025-03-25. Last modified 2026-06-17.