https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 22 Aug 2026 11:16:50 +0000 https://vulnerability.circl.lu/sighting/e765fb47-9c48-4c16-bec5-84ee7c660e14/export {"uuid": "e765fb47-9c48-4c16-bec5-84ee7c660e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "seen", "source": "https://t.me/pphm_HackerNews/2782", "content": "\ud83d\udd34 NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands\n\nSecurity researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI versions 2.5.1 and earlier, with the advisory listing version 2.5.2 as the fixed release. The advisory, published August 13, 2026, states that no CVE has been assigned to it.\n\nThe AMMOS Instrument Toolkit is a framework for building ground data systems, the software that sends commands to instruments and spacecraft and processes the telemetry coming back down. AIT-GUI is its operator console, and the endpoints in question relay operator commands to a command bus.", "creation_timestamp": "2026-08-22T00:00:09.354576Z"} {"uuid": "e765fb47-9c48-4c16-bec5-84ee7c660e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "seen", "source": "https://t.me/pphm_HackerNews/2782", "content": "\ud83d\udd34 NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands\n\nSecurity researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI versions 2.5.1 and earlier, with the advisory listing version 2.5.2 as the fixed release. The advisory, published August 13, 2026, states that no CVE has been assigned to it.\n\nThe AMMOS Instrument Toolkit is a framework for building ground data systems, the software that sends commands to instruments and spacecraft and processes the telemetry coming back down. AIT-GUI is its operator console, and the endpoints in question relay operator commands to a command bus.", "creation_timestamp": "2026-08-22T00:00:09.354576Z"} https://vulnerability.circl.lu/sighting/e765fb47-9c48-4c16-bec5-84ee7c660e14/export Sat, 22 Aug 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/028801a1-33c4-4e55-ba82-d8333ce04402/export {"uuid": "028801a1-33c4-4e55-ba82-d8333ce04402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "seen", "source": "https://t.me/pphm_HackerNews/2782", "content": "\ud83d\udd34 NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands\n\nSecurity researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI versions 2.5.1 and earlier, with the advisory listing version 2.5.2 as the fixed release. The advisory, published August 13, 2026, states that no CVE has been assigned to it.\n\nThe AMMOS Instrument Toolkit is a framework for building ground data systems, the software that sends commands to instruments and spacecraft and processes the telemetry coming back down. AIT-GUI is its operator console, and the endpoints in question relay operator commands to a command bus.", "creation_timestamp": "2026-08-21T23:00:05.438964Z"} {"uuid": "028801a1-33c4-4e55-ba82-d8333ce04402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "seen", "source": "https://t.me/pphm_HackerNews/2782", "content": "\ud83d\udd34 NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands\n\nSecurity researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI versions 2.5.1 and earlier, with the advisory listing version 2.5.2 as the fixed release. The advisory, published August 13, 2026, states that no CVE has been assigned to it.\n\nThe AMMOS Instrument Toolkit is a framework for building ground data systems, the software that sends commands to instruments and spacecraft and processes the telemetry coming back down. AIT-GUI is its operator console, and the endpoints in question relay operator commands to a command bus.", "creation_timestamp": "2026-08-21T23:00:05.438964Z"} https://vulnerability.circl.lu/sighting/028801a1-33c4-4e55-ba82-d8333ce04402/export Fri, 21 Aug 2026 23:00:05 +0000 https://vulnerability.circl.lu/sighting/f645289e-3462-48c9-b37c-0953933c7f6a/export {"uuid": "f645289e-3462-48c9-b37c-0953933c7f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-p9r8-2q67-fp86", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtmg5ti2u72d", "content": "Security researchers at Cycode disclosed critical flaws in NASA/JPL's AIT-GUI, allowing unauthenticated attackers to issue arbitrary spacecraft commands. Tracked as GHSA-p9r8-2q67-fp86, rated 9.4 CVSS, it affects versions 2.5.1 and earlier, fixed in 2.5.2.", "creation_timestamp": "2026-08-21T18:44:44.705988Z"} {"uuid": "f645289e-3462-48c9-b37c-0953933c7f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-p9r8-2q67-fp86", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtmg5ti2u72d", "content": "Security researchers at Cycode disclosed critical flaws in NASA/JPL's AIT-GUI, allowing unauthenticated attackers to issue arbitrary spacecraft commands. Tracked as GHSA-p9r8-2q67-fp86, rated 9.4 CVSS, it affects versions 2.5.1 and earlier, fixed in 2.5.2.", "creation_timestamp": "2026-08-21T18:44:44.705988Z"} https://vulnerability.circl.lu/sighting/f645289e-3462-48c9-b37c-0953933c7f6a/export Fri, 21 Aug 2026 18:44:44 +0000 https://vulnerability.circl.lu/sighting/5451a1ff-2a9d-435d-b701-4ff3d402b771/export {"uuid": "5451a1ff-2a9d-435d-b701-4ff3d402b771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-p9r8-2q67-fp86", "type": "seen", "source": "https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html", "content": "Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI", "creation_timestamp": "2026-08-21T01:00:35.052527Z"} {"uuid": "5451a1ff-2a9d-435d-b701-4ff3d402b771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-p9r8-2q67-fp86", "type": "seen", "source": "https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html", "content": "Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI", "creation_timestamp": "2026-08-21T01:00:35.052527Z"} https://vulnerability.circl.lu/sighting/5451a1ff-2a9d-435d-b701-4ff3d402b771/export Fri, 21 Aug 2026 01:00:35 +0000 https://vulnerability.circl.lu/sighting/0f9d2772-ef71-42fc-a59c-be8243edb425/export {"uuid": "0f9d2772-ef71-42fc-a59c-be8243edb425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "published-proof-of-concept", "source": "Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VE_o1sscCDdPigg", "content": "", "creation_timestamp": "2026-08-21T00:00:09.515565Z"} {"uuid": "0f9d2772-ef71-42fc-a59c-be8243edb425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "published-proof-of-concept", "source": "Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VE_o1sscCDdPigg", "content": "", "creation_timestamp": "2026-08-21T00:00:09.515565Z"} https://vulnerability.circl.lu/sighting/0f9d2772-ef71-42fc-a59c-be8243edb425/export Fri, 21 Aug 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/58680f78-5614-47f3-8523-9d0238454205/export {"uuid": "58680f78-5614-47f3-8523-9d0238454205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-p9r8-2q67-fp86", "type": "seen", "source": "https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html", "content": "Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI", "creation_timestamp": "2026-08-20T16:00:50.866389Z"} {"uuid": "58680f78-5614-47f3-8523-9d0238454205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-p9r8-2q67-fp86", "type": "seen", "source": "https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html", "content": "Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.\n\nThe chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI", "creation_timestamp": "2026-08-20T16:00:50.866389Z"} https://vulnerability.circl.lu/sighting/58680f78-5614-47f3-8523-9d0238454205/export Thu, 20 Aug 2026 16:00:50 +0000 https://vulnerability.circl.lu/sighting/e3233c36-385e-421d-b74c-de7de1ca66c3/export {"uuid": "e3233c36-385e-421d-b74c-de7de1ca66c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "published-proof-of-concept", "source": "Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VE_o1sscCDdPigg", "content": "", "creation_timestamp": "2026-08-20T14:00:04.463819Z"} {"uuid": "e3233c36-385e-421d-b74c-de7de1ca66c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-P9R8-2Q67-FP86", "type": "published-proof-of-concept", "source": "Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VE_o1sscCDdPigg", "content": "", "creation_timestamp": "2026-08-20T14:00:04.463819Z"} https://vulnerability.circl.lu/sighting/e3233c36-385e-421d-b74c-de7de1ca66c3/export Thu, 20 Aug 2026 14:00:04 +0000