A critical flaw (CVSS 9.4) in NASA/JPL’s AIT-GUI let anyone send unauthenticated commands to spacecraft instruments. Cycode researchers found that AIT-GUI, the browser-based operator console in NASA/JPL open-source AMMOS Instrument Toolkit, shipped with no authentication, no session checks, and no CSRF protection on any of its state-changing... Weiterlesen
🛡️ tsecurity.de
IT-Sicherheitsportal & Threat Intelligence
⚡ tsecurity.de Radar
📂 7 🕛 kürzlich ⏱️ 1 Min Lesezeit 13 Leser online 🛡️ CVE-RADAR
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution
🤖
myDraft AI Intelligence Summary
A critical flaw (CVSS 9.4) in NASA/JPL’s AIT-GUI let anyone send unauthenticated commands to spacecraft instruments. Cycode researchers found that AIT-GUI, the browser-based operator console in NASA/JPL open-source AMMOS Instrument Toolkit, shipped with no authentication, no session checks, and no CSRF protection on an...
⚡ Automatisch aggregiert durch myDraft RAG Intelligence Suite
💡 Wie bewertest du diesen Beitrag?
1 Klick Feedback 🔗 Teilen mit Netzwerk:
📊 Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum 🔴 Akute Relevanz 55%
🟡 In Evaluierung 29%
🟢 Keine Auswirkung 11%
💡 Spannende Innovation 5%
⚡ Verwandte Story-Cluster & Quellen (Vektor-KI)
6 Quellen
CVE-2026-61263 | Oracle Scripting up to 12.2.15 Scripting Admin improper authorization
5 Quellen
CVE-2026-61309 | Oracle In-Memory Cost Management for Discrete Industries up to 12.2.15 Internal Operations improper authorization
1 Quelle
Firmendaten für KI-Training: Google kauft Mails einer Pleite-Airline
🧠
384-Dim Vektor-Match KI-Empfehlungen & Semantisch verwandte Analysen
🎯 100% Match ⏱️ 1 Min
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution
📂 4 Lesen ↗
