Is CVE-2026-72579 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-72579?

CVE-2026-72579 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-72579

Description

An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation.