{"metadata": {"vulnerability": "CVE-2026-92154", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-15T17:13:57.865Z", "date_only": false, "value": "2026-09-15T17:13:57.865Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-92154", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T17:17:20.331Z", "date_only": false, "value": "2026-10-14T17:17:20.331Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92154", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T17:17:20.331Z", "date_only": false, "value": "2026-10-14T17:17:20.331Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-92154", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:19:34.630Z", "date_only": false, "value": "2026-10-14T18:19:34.630", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92154", "record": "FKIE_CVE-2026-92154", "field": "published"}, {"timestamp": "2026-10-14T19:16:36.928Z", "date_only": false, "value": "2026-10-14T19:16:36.928959Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxub4kuuza2n", "record": "CVE-2026-92154", "field": "creation_timestamp", "uuid": "a740763d-828d-4c92-b3b0-b52d21176b42", "content": "\ud83d\udfe0 CVE-2026-92154 - High (8.1)\n\nF\u00b4 (F Prime) is a framework that enables development and deployment of spaceflight and other emb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92154/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxub4kuuza2n"}, {"timestamp": "2026-10-14T23:03:29.094Z", "date_only": false, "value": "2026-10-14T23:03:29.094779Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441757678685969", "record": "CVE-2026-92154", "field": "creation_timestamp", "uuid": "87670cbf-ed21-4b52-a9af-95d9e4a27cf1", "content": "CVE-2026-92154 F\u00b4: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation F\u00b4 (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic and then seeks to the large attacker-controlled offset before writing. When a file-uplink DATA packet supplies a byteOffset and dataSize whose unsigned sum wraps below the declared file size, data can be written beyond the declared upload size, causing file integrity loss and potentially large sparse-file growth or resource exhaustion. This issue is fixed in version 4.2.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92154https://github.com/nasa/fprime/security/advisories/GHSA-wx8q-q5gx-f54phttps://github.com/nasa/fprime/pull/4919https://github.com/nasa/fprime/commit/cacdd555456bd83ab395b521d56c0330470ea798#nasa #fprime#CVE_2026_92154#bot", "url": "https://infosec.exchange/users/cve/statuses/117441757678685969"}, {"timestamp": "2026-10-15T18:54:50.578Z", "date_only": false, "value": "2026-10-15T18:54:50.578904Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92154", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T18:54:50.578Z", "date_only": false, "value": "2026-10-15T18:54:50.578904Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92154", "record": "FKIE_CVE-2026-92154", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T18:55:39.170Z", "date_only": false, "value": "2026-10-15T18:55:39.170Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-92154", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:55:39.170Z", "date_only": false, "value": "2026-10-15T18:55:39.170Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92154", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T19:17:48.477Z", "date_only": false, "value": "2026-10-15T19:17:48.477", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92154", "record": "FKIE_CVE-2026-92154", "field": "lastModified"}]}
