Lucene search
K

CVE-2026-44596

🗓️ 27 May 2026 00:04:28Reported by candidateType 
cve
 cve
📰️ 1 Media mentions👁 28 Views🌐 WEB

The connected GitHub advisory describes a concrete vulnerability in Yamcs core: the authentication endpoint POST /auth/token has no rate limiting, account lockout, or throttling, enabling unlimited login attempts and facilitating brute-force attac...

Related
Paths
Social
ParameterPositionPathDescriptionCWE
usernamerequest bodyauth/tokenLack of rate limiting on authentication endpoint allows unlimited password guessing against any user account.CWE-307
passwordrequest bodyauth/tokenLack of rate limiting on authentication endpoint allows unlimited password guessing against any user account.CWE-307

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 May 2026 00:04Current
EPSS0.00052
28