Spaceapplications Yamcs vulnerabilities

• spaceapplications yamcs Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets CVE-2026-55548 Fix available 4.3 MediumJuly 16, 2026
• spaceapplications yamcs Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection CVE-2026-46621 Fix available 9.1 CriticalMay 27, 2026
• spaceapplications yamcs Yamcs: Remote Code Execution via Mission Database algorithm override CVE-2026-46562 Fix available 9.8 CriticalMay 27, 2026
• spaceapplications yamcs Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory` CVE-2026-44632 Fix available 9.1 CriticalMay 27, 2026
• spaceapplications yamcs Yamcs: No Rate Limiting on Authentication Endpoint CVE-2026-44596 Public exploitFix available 6.5 MediumMay 27, 2026
• spaceapplications yamcs Yamcs: Unauthorized user enumeration via IAM API endpoints CVE-2026-44595 Public exploitFix available 4.3 MediumMay 27, 2026
• spaceapplications yamcs An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML... CVE-2023-45281 6.1 MediumOctober 19, 2023
• spaceapplications yamcs Yamcs Cross-site Scripting vulnerability CVE-2023-45280 Fix available 5.4 MediumOctober 19, 2023
• spaceapplications yamcs Yamcs Cross-site Scripting vulnerability CVE-2023-45279 Fix available 5.4 MediumOctober 19, 2023
• spaceapplications yamcs Yamcs API Directory Traversal vulnerability CVE-2023-45278 Fix available 9.1 CriticalOctober 19, 2023
• spaceapplications yamcs Yamcs Path Traversal vulnerability CVE-2023-45277 Public exploitFix available 7.5 HighOctober 19, 2023