tag
Cwe-307
Medium
YAMCS Missing Rate Limiting on Authentication Endpoint (CVE-2026-44596)
CVE-2026-44596 / GHSA-w5r6-mcgq-7pq4·
yamcs-core (YAMCS mission control software)
patched
Medium
WebSocket Authentication Brute-Force via Missing Rate Limiting (CVE-2026-27778)
CVE-2026-27778·
Generic Node.js/Express + ws WebSocket authentication server (demonstration/simulator app)
patched
Medium
Tornet Scooter Mobile App OTP Brute Force via Missing Rate Limiting (CVE-2026-7671)
CVE-2026-7671·
Tornet Scooter Mobile App backend (/TwoFactor endpoint), Android app v4.75
unpatched