What is GHSA-pf5c-m7c5-xfm9?

GHSA-pf5c-m7c5-xfm9 is a security advisory published by GitHub Security Advisories with High severity. Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to...

Which CVE IDs does GHSA-pf5c-m7c5-xfm9 cover?

GHSA-pf5c-m7c5-xfm9 covers the following CVE IDs: CVE-2025-71409. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pf5c-m7c5-xfm9?

GHSA-pf5c-m7c5-xfm9 has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-pf5c-m7c5-xfm9HighCVSS 7.1

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to...

Vendor

GitHub Security Advisories

Published

August 7, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2025-71409 →

📋 Description

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-71409
https://www.cisa.gov/news-events/ics-advisories/icsa-26-219-01
https://github.com/advisories/GHSA-pf5c-m7c5-xfm9