NA
Vendor
NASA-AMMOS
6
CVEs
0
On KEV
1
New 30D
Products
AI9.8
AIT-Core
NASA-AMMOS
2 CVEs0 on KEV1 new
AI9.8
AIT-DSN
NASA-AMMOS
1 CVEs0 on KEV0 new
AI9.8
AIT-GUI
NASA-AMMOS
1 CVEs0 on KEV0 new
AN9.8
anms
NASA-AMMOS
1 CVEs0 on KEV0 new
PS9.8
plandev (sequencing-server)
NASA-AMMOS
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105105 | AI AIT-Core NASA-AMMOS | 9.8 | Oct 3 | Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration |
| CVE-2026-71289 | AN anms NASA-AMMOS | 9.8 | Aug 5 | NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API |
| CVE-2026-71214 | PS plandev (sequencing-server) NASA-AMMOS | 9.8 | Aug 5 | NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin Authorization in sequencing-server |
| CVE-2026-60113 | AI AIT-DSN NASA-AMMOS | 9.8 | Jul 29 | AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes |
| CVE-2026-60112 | AI AIT-GUI NASA-AMMOS | 9.8 | Jul 29 | AIT-GUI < 2.5.1 Missing Authentication via Sessions.create() |
| CVE-2026-47731 | AI AIT-Core NASA-AMMOS | 9.1 | Jul 21 | NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker) |