CVE-2026-46562
🗓️ 16 Jul 2026 16:06:39Reported by GitHub_MType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 122 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 140 |
|---|---|---|---|---|
 | CVE-2026-46562 | 16 Jul 202616:06 | – | attackerkb |
 | CVE-2026-46562 | 21 May 202615:02 | – | circl |
 | CVE-2026-46562 Yamcs: Remote Code Execution via Mission Database algorithm override | 16 Jul 202616:06 | – | cvelist |
 | EUVD-2026-44958 | 16 Jul 202616:06 | – | euvd |
 | Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance) | 28 Aug 202617:23 | – | github |
| Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`) | 28 Aug 202617:30 | – | github |
| Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override | 27 May 202622:45 | – | github |
 | CVE-2026-46562 | 16 Jul 202616:06 | – | mend |
 | CVE-2026-46562 | 16 Jul 202617:16 | – | nvd |
 | CVE-2026-46562 Yamcs: Remote Code Execution via Mission Database algorithm override | 16 Jul 202616:06 | – | osv_cve |
10
Node
[
{
"vendor": "yamcs",
"product": "yamcs",
"versions": [
{
"version": "< 5.12.7",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| algorithm | request body | /MdbOverrideApi.updateAlgorithm | The MdbOverrideApi.updateAlgorithm endpoint allows a user with ChangeMissionDatabase privilege to update an algorithm. Because the Nashorn ScriptEngine is used without a ClassFilter, a user can supply JavaScript that executes arbitrary OS commands. | CWE-470, CWE-94, CWE-95 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Jul 2026 01:53Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.19.8
EPSS0.00976
SSVC