THREATOPS
THREAT OPS › Threat News › [GHSA] GHSA-962x-ccwf-8x6p (high) — Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

[GHSA] GHSA-962x-ccwf-8x6p (high) — Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

medgithub_advisoriesPublished 2026-08-28

GHSA-962x-ccwf-8x6p Severity: high CVE: CVE-2026-55521

Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

### Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges (e.g., an unprivileged "Guest"), to bypass intended acce

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://github.com/advisories/GHSA-962x-ccwf-8x6p