NASA-AMMOS
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AIT-Core | 2 | – | Oct 3, 2026 |
| AIT-DSN | 1 | – | Jul 29, 2026 |
| AIT-GUI | 1 | – | Jul 29, 2026 |
| anms | 1 | – | Aug 5, 2026 |
| plandev (sequencing-server) | 1 | – | Aug 5, 2026 |
Exploited and recent CVEs
- CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration 0.8%
- CVE-2026-71289 NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API 0.7%
- CVE-2026-71214 NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin Authorization in sequencing-server 0.5%
- CVE-2026-60113 AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes 0.8%
- CVE-2026-60112 AIT-GUI < 2.5.1 Missing Authentication via Sessions.create() 0.8%
- CVE-2026-47731 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker) 0.9%