NSA vulnerabilities
We track 2 vulnerabilities in NSA products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 29, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest NSA vulnerabilities
- 8.8 High severity
Ghidra: Improper Neutralization of Special Elements used in an OS Command
Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when an analyst interacts with the UI. Specifically, the @execute annotation (which is intended f
- 9.8 Critical severity
Ghidra: Improper Neutralization of Special Elements used in a Command
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.