Products: 1
    Vulnerabilities: 19
    Known Exploited: 0
    8
    Critical Level Threats
    5
    High Level Threats
    6
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-77602

    OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

    Last Modified: Sep 29, 2026
    Published: Sep 23, 2026

    CVE-2026-77394

    OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

    Last Modified: Sep 23, 2026
    Published: Sep 23, 2026

    CVE-2026-77601

    OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting

    Last Modified: Sep 23, 2026
    Published: Sep 23, 2026

    CVE-2026-42088

    OpenC3 COSMOS: Administrative Actions via the Script Runner Tool

    Last Modified: May 13, 2026
    Published: May 04, 2026

    CVE-2026-42087

    OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base

    Last Modified: May 08, 2026
    Published: May 04, 2026
    Items Per Page
    Openc3 Vulnerabilities & Security CVEs | CVE-DB