Sgoudelis vulnerabilities
We track 2 vulnerabilities in Sgoudelis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Sgoudelis vulnerabilities
- 9.8 Critical severity
ground-station: Missing Authentication for Critical Functionality
ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to pla
- 9.8 Critical severity
ground-station: Improper Limitation of a Pathname to a Restricted Directory
Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterfall-snapshot Socket.IO command passes attacker-controlled snapshotName input from b