Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

NASA-AMMOS vulnerabilities

6 published CVEs name NASA-AMMOS among the affected products.

Newest CVEs

  • CVE-2026-105105

    Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

    NASA-AMMOS · AIT-Core

    Critical9.8
  • CVE-2026-71289

    NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API

    NASA-AMMOS · anms

    Critical9.8
  • CVE-2026-71214

    NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin Authorization in sequencing-server

    NASA-AMMOS · plandev (sequencing-server)

    Critical9.8
  • CVE-2026-60113

    AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

    NASA-AMMOS · AIT-DSN

    Critical9.3
  • CVE-2026-60112

    AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

    NASA-AMMOS · AIT-GUI

    Critical9.3
  • CVE-2026-47731

    NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

    NASA-AMMOS · AIT-Core

    Critical9.1