CVE-2026-44596

CVE-2026-44596 — YAMCS No Rate Limiting on Authentication Endpoint Summary The authentication endpoint POST /auth/token in yamcs-core lacks any form of rate limiting, account lockout, or failed attempt throttling. An unauthenticated remote attacker can perform unlimited password guessing attempts...

CVE-2026-44595

CVE-2026-44595 — YAMCS Unauthorized User Enumeration via IAM API Summary The IAM API endpoints listUsers, getUser, listGroups, getGroup in yamcs-core do not enforce the required SystemPrivilege.ControlAccess check. Any authenticated user — even one with no privileges — can enumerate all user...

Exploit for CVE-2026-55559

Yamcs reconfigureInstance YAML Injection RCE Unauthentica...

org.yamcs:yamcs-simulation (0.29.3) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (0.29.3)

org.yamcs:yamcs-core MAVEN version 0.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 0.29.3 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.2.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.2.1)

org.yamcs:yamcs-core MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.2.1 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-artemis (3.4.6), org.yamcs:yamcs-simulation (3.4.6) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.6)

org.yamcs:yamcs-core MAVEN version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.6 - org.yamcs:yamcs-simulation 3.4.6 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-simulation (0.30.0) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (0.30.0)

org.yamcs:yamcs-core MAVEN version 0.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 0.30.0 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.1.0) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.1.0)

org.yamcs:yamcs-core MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.1.0 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.1.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.1.1)

org.yamcs:yamcs-core MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.1.1 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.1.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.1.2)

org.yamcs:yamcs-core MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.1.2 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.2.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.2.2)

org.yamcs:yamcs-core MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.2.2 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.3.0) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.3.0)

org.yamcs:yamcs-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.3.0 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-simulation (3.3.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.3.1)

org.yamcs:yamcs-core MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-simulation 3.3.1 Source cves: CVE-2026-55566 Source advisory: OSV:GHSA-9272-WG2R-7XMX...

org.yamcs:yamcs-artemis (3.4.1), org.yamcs:yamcs-simulation (3.4.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.1)

org.yamcs:yamcs-core MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.1 - org.yamcs:yamcs-simulation 3.4.1 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.2), org.yamcs:yamcs-simulation (3.4.2) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.2)

org.yamcs:yamcs-core MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.2 - org.yamcs:yamcs-simulation 3.4.2 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.3), org.yamcs:yamcs-simulation (3.4.3) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.3)

org.yamcs:yamcs-core MAVEN version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.3 - org.yamcs:yamcs-simulation 3.4.3 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.5), org.yamcs:yamcs-simulation (3.4.5) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.5)

org.yamcs:yamcs-core MAVEN version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.5 - org.yamcs:yamcs-simulation 3.4.5 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.8), org.yamcs:yamcs-simulation (3.4.8) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.8)

org.yamcs:yamcs-core MAVEN version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.8 - org.yamcs:yamcs-simulation 3.4.8 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (3.4.11), org.yamcs:yamcs-simulation (3.4.11) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (3.4.11)

org.yamcs:yamcs-core MAVEN version 3.4.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 3.4.11 - org.yamcs:yamcs-simulation 3.4.11 Source cves: CVE-2026-55566 Source advisory:...

org.yamcs:yamcs-artemis (4.1.1), org.yamcs:yamcs-simulation (4.1.1) potentially affected by CVE-2026-55566 via org.yamcs:yamcs-core (4.1.1)

org.yamcs:yamcs-core MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.yamcs:yamcs-core and may be impacted: - org.yamcs:yamcs-artemis 4.1.1 - org.yamcs:yamcs-simulation 4.1.1 Source cves: CVE-2026-55566 Source advisory:...