CVE-2026-44595

Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one with low or no privileges, could enumerate all user accounts in the system including their usernames, superuser status, and group memberships. This issue is fixed in versions 5.12.7 and 5.13.0.

• CWE-862

• https://github.com/yamcs/yamcs/commit/0e12b518f103f24681299318a30a460fe4327b88Patch
• https://github.com/yamcs/yamcs/commit/e90099fba98e96214217c195b6a5b87b5f46e51cPatch
• https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7Release Notes
• https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0Release Notes
• https://github.com/yamcs/yamcs/security/advisories/GHSA-p2rj-mrmc-9w29Exploit, Vendor Advisory
• https://github.com/yamcs/yamcs/security/advisories/GHSA-p2rj-mrmc-9w29Exploit, Vendor Advisory

Published

Jul 16, 2026

Last Modified

Jul 18, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44589Nuxt OG Image generates OG Images with Vue templates in Nuxt…3.7
• CVE-2026-4459Out of bounds read and write in WebAudio in Google Chrome pr…8.8
• CVE-2026-44590Sherlock hunts down social media accounts by username across…9.3
• CVE-2026-44592Gradient is a nix-based continuous integration system. In 1.…9.4
• CVE-2026-44593esm.sh is a no-build content delivery network (CDN) for web …8.7
• CVE-2026-44594esm.sh is a no-build content delivery network (CDN) for web …7.5
• CVE-2026-44596Yamcs is a mission control framework. Prior to 5.12.7, the a…9.8
• CVE-2026-44597Tor before 0.4.9.7 has an out-of-bounds read when an END, a …9.1
• CVE-2026-44598With valid login credentials, URL Redirection to Untrusted S…5.4
• CVE-2026-44599Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via confl…5.3
• CVE-2026-4460Out of bounds read in Skia in Google Chrome prior to 146.0.7…8.8
• CVE-2026-44600Tor before 0.4.9.7 mishandles accounting of the conflux out-…5.3