Skip to content
OpenAdvisories

Vendor

sgoudelis

4 known vulnerabilities.

Products

ground-station 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-103244

    ground-station before 0.8.0 Authentication Bypass via setup.restore

    ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to pl…

    sgoudelis ground-station
  • Critical 9.8
    CVE-2026-53451

    Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution

    Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterfall-snapshot Socket.IO command passes attacker-controlled snapshotName input from …

    sgoudelis ground-station