ex-cal1bur/CVE-2026-44595

PoC

# CVE-2026-44595 YAMCS Unauthorized User Enumeration via IAM API

view exploit source poc_in_githubauthor ex-cal1burpublished 2026-05-29catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-44595US	—OT elevated	1.06% (64th)	Exploit	2026-07-16
Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.