CVE-2026-60112Suited to automated attack · CISA
AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()
CVSS score
9.3
EPSS probability
%0.8
Risk score
0.1
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-72577
NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection
N
Patch status unknownEPSS %1
7.5
CVE-2026-72579
NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server
N
Patch status unknownEPSS %1
9.8
CVE-2026-60113
Missing authentication in Nasa Ait Dsn
N
Patch verified Public Exploits:1EPSS %1
9.8
CVE-2026-105105
Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
N
Patch status unknownEPSS %1
7.8
CVE-2025-59534
OS command injection in Nasa Cryptolib
N
Patch verified Public Exploits:1EPSS %1
9.8
CVE-2026-71289
NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API
N
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-60112"