CVE-2026-44596

Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attacker could perform unlimited password-guessing attempts against any user account, significantly increasing the risk of successful brute-force attacks. This issue is fixed in versions 5.12.7 and 5.13.0.

• CWE-307

• https://github.com/yamcs/yamcs/commit/309218c651680f79df11a8d0f8628f7033f98a83Patch
• https://github.com/yamcs/yamcs/commit/64392df531fbcbc65f19ee5724c4c23d289f49fcPatch
• https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7Release Notes
• https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0Release Notes
• https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4Exploit, Vendor Advisory
• https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4Exploit, Vendor Advisory

Published

Jul 16, 2026

Last Modified

Jul 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4459Out of bounds read and write in WebAudio in Google Chrome pr…8.8
• CVE-2026-44590Sherlock hunts down social media accounts by username across…9.3
• CVE-2026-44592Gradient is a nix-based continuous integration system. In 1.…9.4
• CVE-2026-44593esm.sh is a no-build content delivery network (CDN) for web …8.7
• CVE-2026-44594esm.sh is a no-build content delivery network (CDN) for web …7.5
• CVE-2026-44595Yamcs is a mission control framework. Prior to 5.12.7, the I…4.3
• CVE-2026-44597Tor before 0.4.9.7 has an out-of-bounds read when an END, a …9.1
• CVE-2026-44598With valid login credentials, URL Redirection to Untrusted S…5.4
• CVE-2026-44599Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via confl…5.3
• CVE-2026-4460Out of bounds read in Skia in Google Chrome prior to 146.0.7…8.8
• CVE-2026-44600Tor before 0.4.9.7 mishandles accounting of the conflux out-…5.3
• CVE-2026-44601Tor before 0.4.9.7, when circuit queue memory pressure exist…7.5