AIT-Core vulnerabilities

2 known vulnerabilities in AIT-Core from NASA-AMMOS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  AIT-Core: Missing Authentication for Critical Functionality

  CVE-2026-105105Oct 3, 2026NASA-AMMOS

  CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacec

• 9.1 Critical severity

  AIT-Core: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-47731Jul 21, 2026NASA-AMMOS

  The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data System (GDS), Electronic Ground Support Equipment (EGSE), commanding, telemetry uplink/downl