Description
CVE-2026-44596 — YAMCS No Rate Limiting on Authentication Endpoint Summary The authentication endpoint POST /auth/token in yamcs-core lacks any form of rate limiting, account lockout, or failed attempt throttling. An unauthenticated remote attacker can...
Basic Information
ID
26680C7D-63B4-5F68-AA47-63A6A3ADADD4
Published
May 29, 2026 at 13:42
Modified
May 29, 2026 at 13:45