CVE-2026-123485
Last modified
CVE-2026-123485 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler (also exposed as get-tle-sources) to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call either handler to retrieve the plaintext usernames, passwords, and tokens that administrators stored for basic and token orbital sources..
Description
Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler (also exposed as get-tle-sources) to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call either handler to retrieve the plaintext usernames, passwords, and tokens that administrators stored for basic and token orbital sources.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| sgoudelis | ground-station | >= 0.6.0, < 0.8.20 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-123485?
How severe is CVE-2026-123485?
How do I fix CVE-2026-123485?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-12340Out-of-bounds heap read during SM2/SM3 certificate signature…7.5
- CVE-2026-12341This vulnerability impacts all versions of IdentityIQ and al…9.8
- CVE-2026-12342This vulnerability impacts all versions of IdentityIQ and al…9.6
- CVE-2026-12343IBM MQ could allow an authenticated attacker to cause a deni…6.5
- CVE-2026-12345The cleanup of tempfile.TemporaryDirectory is vulnerable to …5.9
- CVE-2026-12348Address bar spoofing in Arc Search for Android allows a remo…7.4
- CVE-2026-123486WWBN AVideo 29.0 through 29.4.0 contains a race condition vu…5.3
- CVE-2026-123487Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 …7.5
- CVE-2026-123488Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contai…9.8
- CVE-2026-123489Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contai…7.1
- CVE-2026-12349The Premium Addons for KingComposer plugin for WordPress is …5.3
- CVE-2026-123490Craft CMS from 5.8.17 before 5.11.2 contains a privilege esc…8.8
Are you affected by CVE-2026-123485?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST