163 matches found
CVE-2026-60112 AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()
AMMOS Instrument Toolkit AIT GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create without any credential check. Attackers can exploit the...
CVE-2026-60112: Missing Authentication for Critical Function
AMMOS Instrument Toolkit AIT GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create without any credential check. Attackers can exploit the...
CVE-2026-60113: Missing Authentication for Critical Function
AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...
ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2026-47731 via ait-core (>=2.3.5, <=2.5.2)
ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2026-47731 Source advisory: MEND:CVE-2026-47731...
ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2024-35061 via ait-core (>=2.3.5, <=2.5.2)
ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35061 Source advisory: OSV:PYSEC-2026-1113...
PYSEC-2026-1113 NASA AIT-Core uses unencrypted channels to exchange data over the network
NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack...
NASA AIT-Core uses unencrypted channels to exchange data over the network
NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack...
ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2026-47731 via ait-core (>=2.3.5, <=2.5.2)
ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2026-47731 Source advisory: OSV:PYSEC-2026-265...
NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)
SummaryThe Binary Stream Capture BSC component exposes an unauthenticated HTTP API for dynamically creating packet capture “handlers.” Because the code blindly trusts path‑related form fields, a remote client can:- Bypass the configured log root and direct BSC to log to arbitrary filesystem...
PYSEC-2026-261 NASA AIT-Core vulnerable to remote code execution
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2024-35058 via ait-core (>=2.3.5, <=2.5.2)
ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35058 Source advisory: OSV:PYSEC-2026-261...
PYSEC-2026-264 NASA AIT-Core vulnerable to remote code execution
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2024-35056 via ait-core (>=2.3.5, <=2.5.2)
ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35056 Source advisory: OSV:PYSEC-2026-262...
PYSEC-2026-262 NASA AIT-Core vulnerable to SQL Injection
NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...
ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2024-35059 via ait-core (>=2.3.5, <=2.5.2)
ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35059 Source advisory: OSV:PYSEC-2026-264...
NASA AIT-Core vulnerable to remote code execution
An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...
ait-dsn (2.0.0), ait-gui (>=2.4.0, <=2.4.1) potentially affected by CVE-2024-35057 via ait-core (>=2.3.5, <=2.5.2)
ait-core PYPI version =2.3.5, =2.4.0, =2.4.1 Source cves: CVE-2024-35057 Source advisory: OSV:PYSEC-2026-263...
PT-2026-53359
NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query packets and insert functions...