CVE-2026-60113
The vulnerability is a missing authentication flaw in the Space Link Extension interface of the AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface. It allows attackers to access seven unprotected API routes without credentials, enabling them to start or stop DSN sessions, retrieve telemetry, and inject frames. The flaw is critical because it can be exploited remotely without authentication.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface, versions prior to 2.2.2.
Real-world impact
An attacker could remotely control DSN communication sessions, steal telemetry data, and inject malicious frames into spacecraft links.
Why this severity
The CVSS score of 9.3 reflects the high impact of the vulnerability: it requires no authentication, is exploitable over the network, and can compromise the confidentiality, integrity, and availability of deep space communications.
What to do about it
- 01Upgrade AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface to version 2.2.2 or later.
NVD-referenced vendor advisory
Timeline
- Jul 29, 2026 · 20h agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 29, 2026 · 19h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.