Reported by 2 outlets
NASA-AMMOS AIT-Core Critical Auth Bypass (CVE-2026-105105)
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 1.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
NASA-AMMOS AIT-Core versions up to 3.1.1 contain CVE-2026-105105 (CVSS 9.8): the ZeroMQ command bus has no authentication, letting remote attackers issue commands and read telemetry. EUVD-2026-92014 records the same flaw with the same CVSS. No patch timeline is stated in the events; watch for a NASA advisory or build update and any exploitation reports against exposed AIT-Core instances.
Timeline
-
original reporting
NASA-AMMOS AIT-Core ≤3.1.1 has a CRITICAL vuln (CVE-2026-105105): ZeroMQ bus lacks auth, exposing command & telemetry to remote attackers. U
radar.offseq.com · 10d ago · October 3rd, 2026
NASA-AMMOS AIT-Core ≤3.1.1 has a CRITICAL vuln (CVE-2026-105105): ZeroMQ bus lacks auth, exposing command & telemetry to remote attackers. U
via Mastodon https://radar.offseq.com/threat/cve-2026-105105-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-ait-core-6642dd3ce660454d
-
update from euvd.enisa.europa.eu
🚨 EUVD-2026-92014 📊 Score: 9.8/10 (CVSS v3.1) 📦 Product: AIT-Core 🏢 Vendor: NASA-AMMOS 📅 Updated: 2026-10-03 📝 CWE-306: Missing Authenticati
euvd.enisa.europa.eu · 10d ago · October 3rd, 2026
🚨 EUVD-2026-92014 📊 Score: 9.8/10 (CVSS v3.1) 📦 Product: AIT-Core 🏢 Vendor: NASA-AMMOS 📅 Updated: 2026-10-03 📝 CWE-306: Missing Authenticati
via Mastodon https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92014