CVE-2026-60112: Missing Authentication in NASA AIT-GUI
CVE-2026-60112 is a critical vulnerability in NASA's AIT-GUI before version 2.5.1, allowing unauthenticated network attackers to obtain a valid session and issue…
Tag: NASA
CVE-2024-35058: Critical RCE in NASA AIT-Core
CVE-2024-35058 is a critical remote code execution vulnerability in the API wait function of NASA AIT-Core, affecting versions up to and including…
CVE-2026-71214: Critical Vulnerability in NASA-AMMOS Aerie/PlanDev
CVE-2026-71214 is a critical vulnerability in the NASA-AMMOS Aerie/PlanDev sequencing server, as listed in the GitHub Advisory Database. Details are limited but…
CVE-2026-71289: Critical Vulnerability in Asynchronous Network Management System
CVE-2026-71289 is a critical vulnerability in the Asynchronous Network Management System reference implementation, as listed in the GitHub Advisory Database. It affects…
NASA/JPL’s AIT-GUI Vulnerabilities Expose Spacecraft Command Systems
NASA/JPL's open-source AMMOS Instrument Toolkit and its AIT-GUI console were found to have critical vulnerabilities that could allow unauthenticated attackers to issue…
AIT-GUI: Operator Console for NASA’s AMMOS Instrument Toolkit
AIT-GUI is a browser-based operator console for NASA/JPL's AMMOS Instrument Toolkit, used to send commands to spacecraft and instruments. Critical vulnerabilities were…
AMMOS Instrument Toolkit: Framework for Ground Data Systems
The AMMOS Instrument Toolkit is an open-source framework for building ground data systems, enabling command and telemetry processing for spacecraft. It is…
NASA-AMMOS Aerie/PlanDev Sequencing Server
Aerie/PlanDev is a sequencing server used in NASA's AMMOS, affected by critical vulnerability CVE-2026-71214, as listed in the GitHub Advisory Database.
Asynchronous Network Management System Reference Implementation
The Asynchronous Network Management System is a reference implementation affected by critical vulnerability CVE-2026-71289, as listed in the GitHub Advisory Database.
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Security researchers at Cycode have disclosed a chain of vulnerabilities in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit.…