PT-2026-65835

CVE-2026-60113

Published

2026-07-29

Updated

2026-07-29

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface versions prior to 2.2.2

Description The Space Link Extension (SLE) interface manager lacks proper authentication, allowing unauthenticated network attackers to access seven unprotected API routes via direct HTTP requests. This allows attackers to start or stop Deep Space Network communication sessions, retrieve telemetry frame data, and inject arbitrary frames into active spacecraft links.

Recommendations Update AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface to version 2.2.2 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Saidakbarxon Maxsudxonov

Vulncheck

Vendors

Affected products

Weakness enumeration

CWE-306: Missing Authentication for Critical Function