CVE-2026-53984 is a missing authentication vulnerability (CWE-306) in Efstratios Goudelis Ground Station prior to version 0.6.0. The Socket.IO server listens on port 7000 with disabled authentication and a wildcard CORS policy, allowing any unauthenticated network peer to emit the database_backup event. This event handler executes attacker-supplied SQL statements via raw exec_driver_sql, enabling complete deletion or replacement of the SQLite database. Attackers can drop all tables and recreate the database with malicious data, compromising satellite records and observation schedules or redirecting sync operations to attacker-controlled servers.

An attacker can remotely connect without authentication and completely wipe or manipulate the Ground Station's SQLite database. This leads to permanent loss of critical data including satellite records, orbital sources, hardware configurations, and observation schedules. Additionally, attackers can inject fabricated data that causes the system to redirect to malicious servers during synchronization, potentially compromising operational integrity and trustworthiness of the ground station data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the Socket.IO server on port 7000 to trusted hosts only and disable or limit the database_backup event handler if possible. Implement network-level controls to prevent unauthenticated access and review CORS policies to avoid wildcard allowances.