Skip to content
Spaceapplications vulnerabilities
Newest
-
spaceapplications yamcs
Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets
CVE-2026-55548
Fix available
4.3 Medium
-
spaceapplications yamcs
Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection
CVE-2026-46621
Fix available
9.1 Critical
-
spaceapplications yamcs
Yamcs: Remote Code Execution via Mission Database algorithm override
CVE-2026-46562
Fix available
9.8 Critical
-
spaceapplications yamcs
Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
CVE-2026-44632
Fix available
9.1 Critical
-
spaceapplications yamcs
Yamcs: No Rate Limiting on Authentication Endpoint
CVE-2026-44596
Public exploitFix available
6.5 Medium
-
spaceapplications yamcs
Yamcs: Unauthorized user enumeration via IAM API endpoints
CVE-2026-44595
Public exploitFix available
4.3 Medium
-
spaceapplications yacms
An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via...
CVE-2023-47311
6.1 Medium
-
spaceapplications yacms
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote...
CVE-2023-46471
5.4 Medium
-
spaceapplications yacms
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote...
CVE-2023-46470
5.4 Medium
-
spaceapplications yamcs
An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML...
CVE-2023-45281
6.1 Medium
-
spaceapplications yamcs
Yamcs Cross-site Scripting vulnerability
CVE-2023-45280
Fix available
5.4 Medium
-
spaceapplications yamcs
Yamcs Cross-site Scripting vulnerability
CVE-2023-45279
Fix available
5.4 Medium
-
spaceapplications yamcs
Yamcs API Directory Traversal vulnerability
CVE-2023-45278
Fix available
9.1 Critical
-
spaceapplications yamcs
Yamcs Path Traversal vulnerability
CVE-2023-45277
Public exploitFix available
7.5 High