These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-55566 is a medium-severity vulnerability in the Yamcs mission control framework. An attacker can exploit this issue by crafting a URL that executes JavaScript when opened by a user, potentially allowing the attacker to read data available to the Yamcs web application and perform actions in the user context. The issue is fixed in versions 5.12.8 and 5.13.2.
CVE-2026-55565 is a critical vulnerability in Yamcs that allows Java code injection through unescaped LIKE patterns. The vulnerability affects Yamcs versions prior to 5.12.8 and 5.13.2. Defenders should assess exposure and prioritize verification and remediation efforts. The vulnerability can be exploited through various API endpoints and activity searches, including paths available with ReadTables, ReadE [truncated]
CVE-2026-55559 is a critical vulnerability in the Yamcs mission control framework that allows for command injection as the Yamcs service account. The issue arises from the lack of YAML-context escaping when inserting templateArgs from POST /api/instances and PATCH /api/instances/{instance} into YAML. This vulnerability is fixed in versions 5.12.8 and 5.13.2.
CVE-2026-55552 is a vulnerability in the Yamcs mission control framework that allows unauthenticated access to arbitrary readable host files. The issue, fixed in version 5.11.13, arises from the StaticFileHandler.locateFile method not properly normalizing and resolving file paths, enabling path traversal attacks. This flaw can disclose sensitive operating-system and application data.
CVE-2026-55549 debrief based on the supplied source corpus. The CVE record was published on 2026-08-28T20:18:28.657Z and has not been modified since then. This medium-severity vulnerability in Yamcs, a mission control framework, allows JavaScript execution via crafted authorization URLs, potentially leading to account compromise and disruption of mission control operations. Defenders responsible for syste [truncated]
CVE-2026-55547 debrief based on the supplied source corpus. The CVE record was published on 2026-08-28T20:18:28.517Z and has not been modified since then. This vulnerability affects Yamcs, a mission control framework, specifically versions prior to 5.12.8 and 5.13.2. The issue allows authenticated accounts to enumerate available system privileges and configured role mappings due to omitted SystemPrivilege [truncated]
A low-privilege authenticated user can receive telemetry packets, algorithm status, and mission database change information outside the assigned authorization scope due to Yamcs WebSocket subscription handlers failing to enforce required privileges. This issue arises from a lack of proper privilege checks in the WebSocket subscription handlers, allowing unauthorized access to sensitive information. Defend [truncated]
CVE-2026-55521 is a high-severity vulnerability in the Yamcs mission control framework. An authenticated low-privilege user can exploit this issue to read packet and event index metadata, alter COP-1 link state, and manipulate simulation time, potentially disclosing telemetry metadata, disrupting telecommand handling, and affecting system integrity and availability. The issue is fixed in versions 5.12.8 and 5.13.2.
A critical vulnerability was found in Yamcs, a mission control framework. The issue allows a user with SystemPrivilege.ControlArchiving to execute arbitrary Java code in the Yamcs server process by creating a specially crafted StreamSQL column name. This can lead to exposure of mission data and credentials, as well as potential telemetry tampering or denial of service.
CVE-2026-55548 debrief: The PacketsApi.exportPackets endpoint in Yamcs, prior to versions 5.12.8 and 5.13.2, failed to enforce object-level ReadPacket privileges when a request omitted specific packet names. This oversight allowed a low-privileged or zero-privilege authenticated user to dump the entire raw telemetry packet archive and bypass the role-based access control model. The issue is fixed in versi [truncated]
A critical vulnerability was discovered in Yamcs, a mission control framework. An authenticated user with the ChangeMissionDatabase privilege could exploit this vulnerability to achieve remote code execution on the underlying host operating system. The issue is fixed in versions 5.12.7 and 5.13.0. The vulnerability allows an attacker to override an existing Python algorithm's logic through the mission dat [truncated]
CVE-2026-46562 is a critical vulnerability in Yamcs' Nashorn ScriptEngine. Prior to version 5.12.7, the ScriptEngine was constructed without a ClassFilter, allowing users with ChangeMissionDatabase privilege to override algorithms and execute arbitrary OS commands as the Yamcs process. In default configurations, the built-in guest user has superuser=true, making the issue reachable without authentication. [truncated]
CVE-2026-44596: Yamcs Authentication Endpoint Lacks Rate Limiting. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core lacked rate limiting, account lockout, or failed-attempt throttling. This allowed unauthenticated remote attackers to perform unlimited password-guessing attempts against any user account, significantly increasing the risk of successful brute-force attacks. The iss [truncated]
CVE-2026-44595 is a MEDIUM severity vulnerability in the Yamcs mission control framework. The IAM API endpoints in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check, allowing any authenticated user to enumerate all user accounts. This issue is fixed in versions 5.12.7 and 5.13.0. Organizations should review their deployments and apply patches to prevent unauthorized access to use [truncated]
CVE-2026-42568 is a MEDIUM severity vulnerability in Yamcs, a mission control framework. An LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. This vulnerability was patched in versions 5.13.0 and 5.12.7.