CVE-2026-53451

creationtimestamp| type| source ---|---|--- 2026-08-19 16:11:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mth4ngh4pp25 2026-08-19 18:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthfjldg5j24 2026-08-22 12:30:04+00:00| seen|...

CVE-2026-53451

Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterfall-snapshot Socket.IO command passes attacker-controlled snapshotName input from backend/handlers/entities/sdr.py to...