Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Efstratios Goudelis Clear all filters
TI-2026-38940 CVE-2026-53983 · GHSA-77cr-rrgg-p4wf

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

Priority MEDIUM 46

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-stat…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00574 Published 2026-08-06 Fixed in 0.6.0 CWE-918
TI-2026-38941 CVE-2026-53984 · GHSA-g756-f8g3-qffc

Missing authentication in Efstratios Goudelis Ground Station

Priority MEDIUM 45

Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network pe…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00726 Published 2026-08-06 Fixed in 0.6.0 CWE-306
TI-2026-38942 CVE-2026-53985 · GHSA-9h78-49rc-9p23

Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

Priority MEDIUM 45

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the gro…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00707 Published 2026-08-06 Fixed in 0.6.0 CWE-306