CVE-2026-44595

CVE-2026-44595 — YAMCS Unauthorized User Enumeration via IAM API Summary The IAM API endpoints listUsers, getUser, listGroups, getGroup in yamcs-core do not enforce the required SystemPrivilege.ControlAccess check. Any authenticated user — even one with no privileges — can enumerate all user...

CVE-2026-44596

CVE-2026-44596 — YAMCS No Rate Limiting on Authentication Endpoint Summary The authentication endpoint POST /auth/token in yamcs-core lacks any form of rate limiting, account lockout, or failed attempt throttling. An unauthenticated remote attacker can perform unlimited password guessing attempts...

Exploit for CVE-2026-55559

Yamcs reconfigureInstance YAML Injection RCE Unauthentica...

org.yamcs:yamcs-artemis (3.4.4), org.yamcs:yamcs-simulation (3.4.4) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.4)

org.yamcs:yamcs-core MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.4 - org.yamcs:yamcs-simulation 3.4.4 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.5), org.yamcs:yamcs-simulation (3.4.5) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.5)

org.yamcs:yamcs-core MAVEN version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.5 - org.yamcs:yamcs-simulation 3.4.5 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.6), org.yamcs:yamcs-simulation (3.4.6) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.6)

org.yamcs:yamcs-core MAVEN version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.6 - org.yamcs:yamcs-simulation 3.4.6 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.8), org.yamcs:yamcs-simulation (3.4.8) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.8)

org.yamcs:yamcs-core MAVEN version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.8 - org.yamcs:yamcs-simulation 3.4.8 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-simulation (3.1.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.1.2)

org.yamcs:yamcs-core MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.1.2 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.2.0) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.2.0)

org.yamcs:yamcs-core MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.2.0 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.2.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.2.2)

org.yamcs:yamcs-core MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.2.2 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-artemis (3.4.0), org.yamcs:yamcs-simulation (3.4.0) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.0)

org.yamcs:yamcs-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.0 - org.yamcs:yamcs-simulation 3.4.0 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (4.1.2), org.yamcs:yamcs-simulation (4.1.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (4.1.2)

org.yamcs:yamcs-core MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 4.1.2 - org.yamcs:yamcs-simulation 4.1.2 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (4.2.0), org.yamcs:yamcs-simulation (4.2.0) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (4.2.0)

org.yamcs:yamcs-core MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 4.2.0 - org.yamcs:yamcs-simulation 4.2.0 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (4.2.1), org.yamcs:yamcs-simulation (4.2.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (4.2.1)

org.yamcs:yamcs-core MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 4.2.1 - org.yamcs:yamcs-simulation 4.2.1 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (4.2.2), org.yamcs:yamcs-simulation (4.2.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (4.2.2)

org.yamcs:yamcs-core MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 4.2.2 - org.yamcs:yamcs-simulation 4.2.2 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (4.4.1), org.yamcs:yamcs-simulation (4.4.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (4.4.1)

org.yamcs:yamcs-core MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 4.4.1 - org.yamcs:yamcs-simulation 4.4.1 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (4.4.2), org.yamcs:yamcs-simulation (4.4.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (4.4.2)

org.yamcs:yamcs-core MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 4.4.2 - org.yamcs:yamcs-simulation 4.4.2 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-simulation (3.3.0) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.3.0)

org.yamcs:yamcs-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.3.0 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.3.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.3.1)

org.yamcs:yamcs-core MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.3.1 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-artemis (3.4.1), org.yamcs:yamcs-simulation (3.4.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.1)

org.yamcs:yamcs-core MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.1 - org.yamcs:yamcs-simulation 3.4.1 Source cves: CVE-2026-55566 Source advisory:...