CVE-2026-42568

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N                                    

Vulnerability Description

Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13.0 and 5.12.7 patch the issue.

Vulnerability Details

Published Date

May 26, 2026

Last Modified

June 11, 2026

CWE ID

CWE-90

Source

GitHub

Vendor

maven

Product

org.yamcs:yamcs-core

External References

https://github.com/yamcs/yamcs/security/advisories/GHSA-cqh3-jg8p-336j
https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7
https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0
https://github.com/advisories/GHSA-cqh3-jg8p-336j

CVE-2026-42568

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment