{"vulnerability": "CVE-2026-92152", "sightings": [{"uuid": "a788b3de-4d61-42ca-be57-923d79cc6c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92152", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117441755034773810", "content": "CVE-2026-92152 F\u00b4: Unvalidated Port Index in GenericHub F\u00b4 (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port dispatch is vulnerable because the deserialized port field is passed to serialOut_out, bufferOut_out, eventOut_out, or tlmOut_out without an explicit range check. When a remote hub packet supplies a port index outside the configured output-port array, assert-enabled builds abort, while builds without assertions can access an output-port array out of bounds, corrupt heap memory, and potentially allow remote code execution. This issue is fixed in version 4.2.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92152https://github.com/nasa/fprime/security/advisories/GHSA-vv4x-5pmf-m59ghttps://github.com/nasa/fprime/pull/4929https://github.com/nasa/fprime/commit/b56b53634fd4251ae84919f22dcff829ef9e0986https://github.com/nasa/fprime/releases/tag/v4.2.0#nasa #fprime#CVE_2026_92152#bot", "creation_timestamp": "2026-10-14T23:02:47.746305Z"}, {"uuid": "91773ed2-a8f3-4c6d-b6bf-8caa918396c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92152", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxuenzzzg52n", "content": "CVE-2026-92152\nVersions 4.1.0 through 4.2.0 of the F\u00b4 (F Prime) framework have a flaw in the GenericHub component that can let a specially crafted remote packet write outside its data area. This can corrupt memory and, in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-14T20:20:04.378955Z"}, {"uuid": "b31285f3-3a95-4bc7-b684-dab1d6679716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92152", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxue6zpylt2n", "content": "\ud83d\udea8 CVE-2026-92152 \u2014 CVSS 9.3 CRITICAL\n\nF\u00b4 (F Prime) is a framework that enables development and deployment of spaceflight and other embedded softw...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92152\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-14T20:11:40.339123Z"}]}