CVE-2026-55549

Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirect_uri parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java and yamcs-core/src/main/java/org/yamcs/http/HandlerContext.java. A crafted authorization URL can execute JavaScript when opened by a Yamcs user. The script can access browser-held authentication material and transmit it to an attacker, enabling account compromise. This issue is fixed in version 5.9.4.

• CWE-79

• https://github.com/yamcs/yamcs/commit/4d47d5cdcf5d92c2c5bbbc19feada422923332e3
• https://github.com/yamcs/yamcs/releases/tag/yamcs-5.9.4
• https://github.com/yamcs/yamcs/security/advisories/GHSA-rxpg-wjf8-qv9c
• https://github.com/yamcs/yamcs/security/advisories/GHSA-rxpg-wjf8-qv9c

Published

Aug 28, 2026

Last Modified

Sep 8, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55542Snipe-IT is an IT asset/license management system. Prior to …4.3
• CVE-2026-55544NextCRM is open-source customer relationship management (CRM…7.6
• CVE-2026-55545Yamcs is a mission control framework. Prior to 5.12.8 and 5.…6.5
• CVE-2026-55546QWED-MCP is a deterministic verification gateway for MCP. Pr…9.8
• CVE-2026-55547Yamcs is a mission control framework. Prior to 5.12.8 and 5.…4.3
• CVE-2026-55548Yamcs is a mission control framework. Prior to 5.12.8 and 5.…4.3
• CVE-2026-5555A weakness has been identified in code-projects Concert Tick…7.3
• CVE-2026-55550NextCRM is open-source customer relationship management (CRM…7.1
• CVE-2026-55552Yamcs is a mission control framework. Prior to 5.11.13, Yamc…7.5
• CVE-2026-55553urllib is an HTTP client for Node.js that supports authentic…7.5
• CVE-2026-55554Dompdf is an HTML to PDF converter for PHP. In versions 3.15…7.5
• CVE-2026-55555Dompdf is an HTML to PDF converter for PHP. Versions 3.15 an…7.5