VYPR

Planet

by Planet

CVEs (3)

  • CVE-2026-50602HigAug 17, 2026
    risk 0.55cvss —epss 0.00

    A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application executable used by the Planet9 background service. The service runs with SYSTEM privileges, while the affected executable grants excessive permissions to…

  • CVE-2024-52558MedDec 6, 2024
    risk 0.34cvss 5.3epss 0.01

    The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.

  • CVE-2023-32303MedMay 12, 2023
    risk 0.27cvss 5.2epss 0.00

    Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the file as well. This…