VendorsOpenC3cosmos7.0.0
Vulnerabilities

OpenC3 COSMOS 7.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2026-42088
OpenC3 COSMOS: Administrative Actions via the Script Runner Tool
Published 2026-05-04 · Analyzed
9.6EPSS 0.005
CVE-2026-42087
OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base
Published 2026-05-04 · Analyzed
9.6EPSS 0.004
CVE-2026-42084
OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence
Published 2026-05-04 · Analyzed
8.1EPSS 0.004
CVE-2026-42086
OpenC3 COSMOS: Self-XSS in the Command Sender
Published 2026-05-04 · Analyzed
4.6EPSS 0.003
CVE-2026-42085
OpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenames
Published 2026-05-04 · Analyzed
4.3EPSS 0.004