Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 02:56:56 +0000 CVE-2026-71289 — NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API https://vulnerability.circl.lu/vuln/cve-2026-71289 <p><strong>Affected:</strong> NASA-AMMOS anms</p> <p>The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation&#39;s default docker-compose.yml publishes the amp-manager service&#39;s REST API directly to the host network interface (port 8089, e.g. &#34;:8089/tcp&#34;) with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access Manager) gateway that is otherwise the system&#39;s sole authentication boundary.</p> <p><strong>Affected:</strong> NASA-AMMOS anms</p> <p>The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation&#39;s default docker-compose.yml publishes the amp-manager service&#39;s REST API directly to the host network interface (port 8089, e.g. &#34;:8089/tcp&#34;) with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access Manager) gateway that is otherwise the system&#39;s sole authentication boundary.</p> https://vulnerability.circl.lu/vuln/cve-2026-71289