VYPR

AIT-GUI

by NASA AMMOS

CVEs (1)

  • CVE-2026-60112CriJul 29, 2026
    risk 0.64cvss 9.8epss 0.01

    AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create() without any credential check. Attackers…