CVE-2026-55547
1 advisory.
Maven/org.yamcs:yamcs-core CVE-2026-55547: medium 4.3
Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Action: Upgrade org.yamcs:yamcs-core to 5.12.8 (5.12.x) or 5.13.2 (5.13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.13.0 | 5.13.2 | - |
| 0 | 5.12.8 | - |
Fixed versions
| 5.13.2 | 5.12.8 |
Sources
- osv: GHSA-cvw4-55pp-3hfq
- https://github.com/yamcs/yamcs/security/advisories/GHSA-cvw4-55pp-3hfq
- https://github.com/yamcs/yamcs/commit/c2aec1c242e656e48b52c7f87deea88183bb592d
- https://github.com/yamcs/yamcs/commit/dcaec5f0b2f4231b8e313e94d79a937169c9e0ba
- https://github.com/yamcs/yamcs
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.8
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.2
CVE-2026-55547 · published · modified · JSON