Skip to content
OpenAdvisories

Vendor

yamcs

16 known vulnerabilities.

Products

yamcs 16
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-44596 Public exploit

    Yamcs: No Rate Limiting on Authentication Endpoint

    Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttlin…

    yamcs yamcs org.yamcs:yamcs-core Maven
  • Medium 4.3
    CVE-2026-44595 Public exploit

    Yamcs: Unauthorized user enumeration via IAM API endpoints

    Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java…

    yamcs yamcs org.yamcs:yamcs-core Maven
  • Medium 4.3
    CVE-2026-42568 Public exploit

    Yamcs Vulnerable to LDAP Injection in LdapAuthModule

    Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without…

    yamcs yamcs org.yamcs:yamcs-core Maven