CVE-2026-42568

Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13.0 and 5.12.7 patch the issue.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7
https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0
https://github.com/yamcs/yamcs/security/advisories/GHSA-cqh3-jg8p-336j

Configurations

No configuration.

History

21 Jul 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Yamcs es un framework de control de misión. Antes de las versiones 5.13.0 y 5.12.7, existe una vulnerabilidad de inyección LDAP en 'org.yamcs.security.LdapAuthModule' al construir filtros de búsqueda. El parámetro de nombre de usuario se inserta directamente en el filtro LDAP sin el escape RFC 4515 adecuado. Las versiones 5.13.0 y 5.12.7 parchean el problema.

10 Jun 2026, 23:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-10 23:16

Updated : 2026-07-21 19:10

NVD link : CVE-2026-42568

Mitre link : CVE-2026-42568

CVE.ORG link : CVE-2026-42568

JSON object : View

Products Affected

No product.

CWE

CWE-90

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

{"id": "CVE-2026-42568", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42568", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-11T14:47:09.450504Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "yamcs", "product": "yamcs", "versions": [{"status": "affected", "version": "< 5.12.7"}]}]}], "published": "2026-06-10T23:16:46.550", "references": [{"url": "https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7", "source": "security-advisories@github.com"}, {"url": "https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/yamcs/yamcs/security/advisories/GHSA-cqh3-jg8p-336j", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-90"}]}], "descriptions": [{"lang": "en", "value": "Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13.0 and 5.12.7 patch the issue."}, {"lang": "es", "value": "Yamcs es un framework de control de misi\u00f3n. Antes de las versiones 5.13.0 y 5.12.7, existe una vulnerabilidad de inyecci\u00f3n LDAP en 'org.yamcs.security.LdapAuthModule' al construir filtros de b\u00fasqueda. El par\u00e1metro de nombre de usuario se inserta directamente en el filtro LDAP sin el escape RFC 4515 adecuado. Las versiones 5.13.0 y 5.12.7 parchean el problema."}], "lastModified": "2026-07-21T19:10:00.107", "sourceIdentifier": "security-advisories@github.com"}