CVE-2026-105105

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command and telemetry traffic, inject forged telemetry, or disrupt the command and telemetry bus. The ait-server ZeroMQ broker binds its XSUB and XPUB sockets to all network interfaces by default without authentication or transport security. An attacker able to reach TCP port 5559 can publish messages onto internal topics, including the __commands__ command topic. With the shipped default configuration, command messages are forwarded through command_stream and emitted on the command-uplink UDP path. An attacker able to reach TCP port 5560 can subscribe to command and telemetry traffic on the ground bus. AIT-Core 3.1.2 changes the default ZeroMQ bind addresses to loopback.

• CWE-306

• https://github.com/Mothra-1
• https://github.com/NASA-AMMOS/AIT-Core/
• https://github.com/NASA-AMMOS/AIT-Core/security/advisories/GHSA-ccw5-g774-3683
• https://github.com/advisories/GHSA-3j6g-pxmx-58qg

Published

Oct 3, 2026

Last Modified

Oct 3, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105096A vulnerability was determined in Omega Solution CoinEx Cryp…6.3
• CVE-2026-105097A vulnerability was identified in Omega Solution CoinEx Cryp…4.3
• CVE-2026-105098A security flaw has been discovered in Omega Solution CoinEx…4.3
• CVE-2026-105099A weakness has been identified in Omega Solution CoinEx Cryp…3.5
• CVE-2026-1051The Newsletter – Send awesome emails from WordPress plugin f…4.3
• CVE-2026-10510Cross-Site Scripting (XSS) in GeniexWebView component in Tra…6.1
• CVE-2026-105112Nezha from 1.8.0 before 2.3.13 contains a lock-order inversi…5.3
• CVE-2026-105113Nezha Dashboard from 1.8.0 before 2.3.13 contains an imprope…6.5
• CVE-2026-105114OpenAM before 16.1.3 contains a reflected cross-site scripti…6.1
• CVE-2026-105115OpenAM before 16.1.3 contains an unauthenticated arbitrary c…8.6
• CVE-2026-105116OpenAM before 16.1.3 contains a latent cross-site scripting …6.1
• CVE-2026-105117OpenAM before 16.1.3 contains an email content injection vul…6.1