AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T22:17:42.280Z and has not been modified since then. Ground Station prior to version 0.6.0 contains a high-severity vulnerability in the Socket.IO server's database_backup event handler, allowing unauthenticated network peers to destroy or replace the entire SQLite database by sending a single ful [truncated]
CRITICALEfstratios GoudelisCVE published 2026-08-06
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations. Attackers can connect to the Socket.IO server on port 7000 without credentials due to disabled authentication e [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T16:16:43.620Z and has not been modified since then. CVE-2026-53985 is an unauthenticated denial-of-service vulnerability in Ground Station prior to 0.6.0. The Socket.IO server's service_control event handler allows any unauthenticated network peer to forcibly terminate the ground-station process [truncated]
