Critical severity9.8NVD Advisory· Published Jul 29, 2026· Updated Aug 18, 2026
CVE-2026-60113
CVE-2026-60113
Description
AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension (SLE) interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no credentials. Attackers can reach the exposed SLE endpoints to start or stop Deep Space Network communication sessions, retrieve telemetry frame data, and inject arbitrary frames into active spacecraft links.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.2.2
Patches
Vulnerability mechanics
References
5- github.com/NASA-AMMOS/AIT-DSN/commit/06d07d1a525602c62c6eaeaeff2544196f430340nvdPatch
- www.vulncheck.com/advisories/ait-dsn-missing-authentication-via-sle-api-routesnvdPatchRelease NotesThird Party Advisory
- github.com/NASA-AMMOS/AIT-DSN/security/advisories/GHSA-gj83-67wr-82mvnvdExploitVendor Advisory
- github.com/NASA-AMMOS/AIT-DSN/blob/master/CHANGELOG.mdnvdRelease Notes
- github.com/NASA-AMMOS/AIT-DSN/releases/tag/2.2.2nvdProductRelease Notes
News mentions
0No linked articles in our index yet.