Skip to content
OpenAdvisories
Medium · 6.5 Public exploit CVE-2026-44596 EUVD-2026-44956GHSA-w5r6-mcgq-7pq4

Yamcs: No Rate Limiting on Authentication Endpoint

Published Jul 16, 2026 · Updated Jul 17, 2026 · Assigned by GitHub_M

Vendor: yamcs Product: yamcs Package: org.yamcs:yamcs-core Ecosystem: Maven

Description

Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attacker could perform unlimited password-guessing attempts against any user account, significantly increasing the risk of successful brute-force attacks. This issue is fixed in versions 5.12.7 and 5.13.0.

Affected products

VendorProductAffectedFixed
yamcs yamcs < 5.12.7 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

GitHub 1 repository

  • ex-cal1bur/CVE-2026-44596 ★ 0 · May 29, 2026

    YAMCS yamcs-core < 5.12.7 lacks rate limiting on POST /auth/token. An unauthenticated attacker can perform unlimited brute-force attempts against any account. Never returns HTTP 429. Fixed in 5.12.7.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.yamcs:yamcs-core < 5.12.7 5.12.7 GHSA-w5r6-mcgq-7pq4

References