CVE-2026-55548
1 advisory.
Maven/org.yamcs:yamcs-core CVE-2026-55548: medium 4.3
Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets
Action: Upgrade org.yamcs:yamcs-core to 5.12.8 (5.12.x) or 5.13.2 (5.13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.13.0 | 5.13.2 | - |
| 0 | 5.12.8 | - |
Fixed versions
| 5.13.2 | 5.12.8 |
Sources
- osv: GHSA-8xjq-pr36-ccgf
- https://github.com/yamcs/yamcs/security/advisories/GHSA-8xjq-pr36-ccgf
- https://nvd.nist.gov/vuln/detail/CVE-2026-55548
- https://github.com/yamcs/yamcs/commit/b566beceba98cc35514b0e1519be126b8c5a0438
- https://github.com/yamcs/yamcs/commit/c743cc3acf5b5c53ff5181b94eacc21340f70dd9
- https://github.com/yamcs/yamcs
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.8
- https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.2
CVE-2026-55548 · published · modified · JSON