National Oceanic and Atmospheric Administration (NOAA) vulnerabilities
We track 1 vulnerability in National Oceanic and Atmospheric Administration (NOAA) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 15, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest National Oceanic and Atmospheric Administration (NOAA) vulnerabilities
- 9.8 Critical severity
Live Access Server (LAS): Improper Neutralization of Special Elements used in an OS Command
Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixe