Medium severity4.3GHSA Advisory· Published Jun 10, 2026· Updated Jun 11, 2026

CVE-2026-42568

Description

Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13.0 and 5.12.7 patch the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.yamcs:yamcs-coreMaven	< 5.12.7	5.12.7

Affected products

Yamcs/YamcsGHSA
Range: < 5.12.7
ghsa-coords
pkg:maven/org.yamcs/yamcs-core
Range: < 5.12.7

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-cqh3-jg8p-336jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-42568ghsaADVISORY
github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7nvdWEB
github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0nvdWEB
github.com/yamcs/yamcs/security/advisories/GHSA-cqh3-jg8p-336jnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000