Exploitation Summary
EIP tracks 2 public exploits for CVE-2026-44596. PoCs published by Daniel Miranda, ex-cal1bur.
AI-analyzed exploit summary This script demonstrates CVE-2026-44596, a lack of rate limiting in YAMCS yamcs-core < 5.12.7, allowing unauthenticated brute-force attacks on the /auth/token endpoint. It sends multiple login attempts and checks for HTTP 429 (rate-limited) or 200 (successful login) responses.
Description
Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attacker could perform unlimited password-guessing attempts against any user account, significantly increasing the risk of successful brute-force attacks. This issue is fixed in versions 5.12.7 and 5.13.0.
Exploits (2)
This script demonstrates CVE-2026-44596, a lack of rate limiting in YAMCS yamcs-core < 5.12.7, allowing unauthenticated brute-force attacks on the /auth/token endpoint. It sends multiple login attempts and checks for HTTP 429 (rate-limited) or 200 (successful login) responses.
The repository contains a functional proof-of-concept exploit for CVE-2026-44596, demonstrating the lack of rate limiting on the YAMCS authentication endpoint. The script sends multiple login attempts and checks for HTTP 429 responses to confirm vulnerability.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N