Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/07/16 4:07 p.m.•51 views

CVE-2026-46621 Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection

Yamcs is a mission control framework. Prior to 5.12.7, the Yamcs script evaluation engine for Python algorithms dynamically compiled and evaluated user-controlled algorithm text using Jython through the JSR-223 ScriptEngine API without enforcing a secure sandbox, so an authenticated user with the...

9.1CVSS0.01116EPSS
SaveExploits1References5
Rows per page
Query Builder