CVE-2026-44596
Vulnerability in Spaceapplications Yamcs
CVSS score
9.8
EPSS probability
%2.1
Risk score
0.2
Published
3 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
YAMCS yamcs-core < 5.12.7 lacks rate limiting on POST /auth/token. An unauthenticated attacker can perform unlimited brute-force attempts against any account. Never returns HTTP 429. Fixed in 5.12.7.
Makefile Go / Python
Exploit-DB
YAMCS yamcs-core 5.12.7 - No Rate Limiting
Makefile Go / Python
https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4
Makefile Go / Python
Similar Vulnerabilities
9.1
CVE-2026-46621Code injection in Spaceapplications Yamcs
Patch verified Public Exploits:1EPSS %1
9.1
CVE-2026-44632Code injection in Spaceapplications Yamcs
Patch verified Public Exploits:1EPSS %1
9.8
CVE-2026-46562Code injection in Spaceapplications Yamcs
Patch verified Public Exploits:1EPSS %1
4.3
CVE-2026-44595Missing authorization in Spaceapplications Yamcs
Patch verified Public Exploits:2EPSS %1
4.3
CVE-2026-55548Improper access control in Spaceapplications Yamcs
Patch verified Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-44596"