Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: NASA-AMMOS Clear all filters
TI-2026-67483 CVE-2026-105105 · GHSA-9xfm-37f4-2h8g

Missing authentication in NASA-AMMOS AIT-Core

Priority MEDIUM 50

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00783 Published 2026-10-03 No fix listed CWE-306
TI-2026-49956 CVE-2026-71289 · GHSA-p73q-wm5v-6vh6

NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API

Priority MEDIUM 50

The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089, e.g.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00682 Published 2026-08-05 No fix listed CWE-306
TI-2026-49889 CVE-2026-71214 · GHSA-x4pc-pqfq-54j2

NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin Authorization in sequencing-server

Priority MEDIUM 49

The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app.ts) derives the caller's Hasura session role via getHasuraSession, which prefers a session_variables object taken directly from th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2026-08-05 No fix listed CWE-306
TI-2026-35232 CVE-2026-47731 · GHSA-p462-prxw-mjx4

Path traversal in NASA-AMMOS AIT-Core

Priority HIGH 78

The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data System (GDS), Electronic Ground Support Equipment (E…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00885 Published 2026-07-21 Fixed in 2.6.1, 3.1.1 CWE-22