CVE-2026-55545
1 advisory.
Maven/org.yamcs:yamcs-core CVE-2026-55545: medium 6.5
Yamcs's WebSocket subscription handlers omit the privilege checks their REST siblings enforce
Action: Upgrade org.yamcs:yamcs-core to 5.12.8 (5.12.x) or 5.13.2 (5.13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.8 | - |
| 5.13.0 | 5.13.2 | - |
Fixed versions
| 5.12.8 | 5.13.2 |
Sources
- osv: GHSA-fwww-cp23-7f5g
- https://github.com/yamcs/yamcs/security/advisories/GHSA-fwww-cp23-7f5g
- https://github.com/yamcs/yamcs/commit/0691731846c5a0aca81b88fabbd2cd51d56fe076
- https://github.com/yamcs/yamcs/commit/12864af555e6ca4941b01c1f1217859cc0492ce0
- https://github.com/yamcs/yamcs
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.8
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.2
CVE-2026-55545 · published · modified · JSON