CVE-2026-55545Medium· 6.5▾ SunlitYamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs WebSocket subscription handlers fail to enforce the privileges required by equivalent REST endpoints. PacketsApi.subscribePackets exposes the packets WebSocket topic…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs WebSocket subscription handlers fail to enforce the privileges required by equivalent REST endpoints. PacketsApi.subscribePackets exposes the packets WebSocket topic without ObjectPrivilegeType.ReadPacket, ProcessingApi.subscribeAlgorithmStatus exposes the algorithm-status WebSocket topic without ObjectPrivilegeType.ReadAlgorithm, and MdbOverrideApi.subscribeMdbChanges exposes the mdb-changes WebSocket topic without SystemPrivilege.GetMissionDatabase. A low-privilege authenticated user can receive telemetry packets, algorithm status, and mission database change information outside the assigned authorization scope. This issue is fixed in versions 5.12.8 and 5.13.2.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
org.yamcs:yamcs-core <= 5.12.7org.yamcs:yamcs-core >= 5.13.0, <= 5.13.1Patched in:
org.yamcs:yamcs-core 5.12.8org.yamcs:yamcs-core 5.13.2Connected by shared product, vendor, weakness, or advisory.
CVE-2026-55521High· 8.8Yamcs is a mission control framework
CVE-2026-55547Medium· 4.3Yamcs is a mission control framework
CVE-2026-55559Critical· 9.8Yamcs is a mission control framework
CVE-2026-55565Critical· 9.9Yamcs is a mission control framework
CVE-2026-55566Medium· 4.3Yamcs is a mission control framework
CVE-2026-55511Critical· 9.1Yamcs is a mission control framework