CVE-2026-44595

CVE-2026-44595 — YAMCS Nicht autorisierte Benutzeraufzählung über IAM-API Zusammenfassung Die IAM-API-Endpunkte listUsers, getUser, listGroups, getGroup in yamcs-core erzwingen nicht die erforderliche SystemPrivilege.ControlAccess-Prüfung. Jeder authentifizierte Benutzer – selbst einer ohne...

CVE-2026-55511

CVE-2026-55511: Yamcs StreamSQL RCE Autenticado Prova de conceito não-armamentizada e documentação técnica para CVE-2026-55511, uma vulnerabilidade de injeção de código Java autenticada no compilador de expressão agregada Yamcs StreamSQL...

CVE-2026-44596

CVE-2026-44596 — YAMCS Keine Ratenbegrenzung am Authentifizierungs-Endpunkt Zusammenfassung Der Authentifizierungs-Endpunkt POST /auth/token in yamcs-core hat keinerlei Ratenbegrenzung, Kontosperrung oder Drosselung fehlgeschlagener Versuche. Ein nicht authentifizierter entfernter Angreifer kann...

CVE-2026-42568

CVE-2026-42568 — YAMCS में LDAP इंजेक्शन LdapAuthModule में सारांश org.yamcs.security.LdapAuthModule में एक LDAP इंजेक्शन भेद्यता मौजूद है। उपयोगकर्ता नाम पैरामीटर को RFC 4515 एस्केपिंग के बिना सीधे LDAP खोज फ़िल्टर में डाला जाता है, जिससे प्रमाणीकरण बाईपास संभव हो जाता है।...

yamcs__yamcs_CVE-2023-45277_5-8-6

Yamcs मिशन नियंत्रण वेबसाइट: https://yamcs.org मेलिंग सूची: Google Groups Yamcs Java में विकसित एक मिशन नियंत्रण ढाँचा framework है। यह एक खुली वास्तुकला का उपयोग करता है जो yaml कॉन्फ़िगरेशन फ़ाइलों का उपयोग करके इसकी क्षमताओं को अनुकूलित करने की अनुमति देता है। आप कस्टम Java क्लासेस लिखकर...

CVE-2026-55548

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enforce object-level ReadPacket privileges when a request omitted specific packet names: with an empty name list the...

CVE-2026-46562

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

CVE-2026-44596

Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attack...

CVE-2026-55548

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enforce object-level ReadPacket privileges when a request omitted specific packet names: with an empty name list the...

EUVD-2026-44960

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enforce object-level ReadPacket privileges when a request omitted specific packet names: with an empty name list the...

CVE-2026-55548

In Yamcs, CVE-2026-55548 affects the PacketsApi.exportPackets endpoint. The root cause was failure to enforce per-packet ReadPacket privileges when a request supplied an empty packet-name list, causing no WHERE pname IN filter and the onTuple handler to stream packets without per-row authorizatio...

CVE-2026-55548 Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enforce object-level ReadPacket privileges when a request omitted specific packet names: with an empty name list the...

CVE-2026-46621 Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection

Yamcs is a mission control framework. Prior to 5.12.7, the Yamcs script evaluation engine for Python algorithms dynamically compiled and evaluated user-controlled algorithm text using Jython through the JSR-223 ScriptEngine API without enforcing a secure sandbox, so an authenticated user with the...

CVE-2026-46621

Summary of CVE-2026-46621 (Yamcs) : The issue arises in Yamcs’ script evaluation engine for Python algorithms, where user-controlled code is dynamically compiled and executed via Jython (JSR-223) without a secure sandbox. An authenticated user with the ChangeMissionDatabase privilege can override...

EUVD-2026-44959

Yamcs is a mission control framework. Prior to 5.12.7, the Yamcs script evaluation engine for Python algorithms dynamically compiled and evaluated user-controlled algorithm text using Jython through the JSR-223 ScriptEngine API without enforcing a secure sandbox, so an authenticated user with the...

CVE-2026-46562

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

CVE-2026-46562

Summary : CVE-2026-46562 affects Yamcs releases from 4.7.3 through 5.12.6. The vulnerability stems from constructing the Nashorn ScriptEngine without a ClassFilter, allowing a user with ChangeMissionDatabase privilege (or unauthenticated in default config) to execute arbitrary Java via Java.type,...

CVE-2026-44632 Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`

Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino...

CVE-2026-44632

CVE-2026-44632 affects Yamcs: the server-side evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory) can compile and execute user-supplied algorithm text via Janino without sandboxing. An authenticated user with ChangeMissionDatabase privilege could override an algorithm throug...

CVE-2026-44596

Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attack...