tag
Brute-Force
Medium
YAMCS Missing Rate Limiting on Authentication Endpoint (CVE-2026-44596)
CVE-2026-44596 / GHSA-w5r6-mcgq-7pq4·
yamcs-core (YAMCS mission control software)
patched
Medium
WebSocket Authentication Brute-Force via Missing Rate Limiting (CVE-2026-27778)
CVE-2026-27778·
Generic Node.js/Express + ws WebSocket authentication server (demonstration/simulator app)
patched
High
JeecgBoot mLogin Endpoint CAPTCHA Bypass Enabling Credential Brute Force (CVE-2026-8196)
CVE-2026-8196·
JeecgBoot (/sys/mLogin endpoint)
unpatched