NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-20 11:05 UTC
  • Importiert: 2026-08-26 17:02 UTC
  • Quelle-ID: thn_global
  • uid_hash: fdc16046a75174333db50cdc3c002546130f46aba47ca7c0da9bc272d8af48f5

Inhalt

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.

The chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews