Skip to content
OpenAdvisories

Vendor

sgoudelis

4 known vulnerabilities.

Products

ground-station 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-123485

    Ground Station 0.6.0 before 0.8.20 Credential Disclosure via get-orbital-sources

    Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler (also exposed as get-tle-sources) to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call ei…

    sgoudelis ground-station
  • Medium 5.3
    CVE-2026-53452

    Ground Station: Unauthenticated out-of-containment file read via `sigmfplayback` `recordingPath`

    Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated configure-sdr Socket.IO command accepts a recordingPath for the sigmf-playback SDR and backen…

    sgoudelis ground-station