VendorsSpace Applicationsyamcsany version
Vulnerabilities

Space Applications Yamcs any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2026-44596
Yamcs: No Rate Limiting on Authentication Endpoint
Published 2026-07-16 · Analyzed
9.81 PoCEPSS 0.021
CVE-2026-46562
Yamcs: Remote Code Execution via Mission Database algorithm override
Published 2026-07-16 · Analyzed
9.8EPSS 0.010
CVE-2026-44632
Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
Published 2026-07-16 · Analyzed
9.1EPSS 0.011
CVE-2026-46621
Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection
Published 2026-07-16 · Analyzed
9.1EPSS 0.011
CVE-2026-44595
Yamcs: Unauthorized user enumeration via IAM API endpoints
Published 2026-07-16 · Modified
4.31 PoCEPSS 0.011
CVE-2026-55548
Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets
Published 2026-07-16 · Analyzed
4.3EPSS 0.004