Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-stat…
CVSS 4.0CRITICAL 9.2·Network·No auth·No interaction·EPSS 0.00574·Published 2026-08-06·Fixed in 0.6.0CWE-918
Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the gro…
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00707·Published 2026-08-06·Fixed in 0.6.0CWE-306
Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network pe…
CVSS 4.0HIGH 8.8·Network·No auth·No interaction·EPSS 0.00726·Published 2026-08-06·Fixed in 0.6.0CWE-306
