SecurityThe Hacker Newsabout 1 hour ago
NASA AIT-GUI Flaws Allow Unauthenticated Spacecraft Commands
1 min read
Cycode disclosed AIT-GUI flaws allowing unauthenticated attackers to issue spacecraft commands, rated 9.4 CVSS, affecting versions 2.5.1 and earlier, fixed in 2.5.2. The console binds to 0.0.0.0:8080 with no authentication or CSRF protection. A separate CVE-2026-60112, rated 9.3, covers the same defect.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
