CVE-2026-53984 describes a missing authentication vulnerability (CWE-306) in Efstratios Goudelis Ground Station versions prior to 0.6.0. The Socket.IO server listens on port 7000 and accepts a database_backup event that processes a full_restore command containing attacker-supplied SQL blobs. Because authentication enforcement is disabled and CORS policy is overly permissive, any unauthenticated network peer can connect and emit this event, causing the SQLite database to be dropped and recreated with attacker-controlled data. This allows permanent destruction of critical satellite records, orbital sources, hardware configurations, and observation schedules or insertion of fabricated data that redirects the ground station to malicious servers during synchronization.

An attacker can remotely and without authentication completely wipe the ground station's SQLite database or replace it with malicious data. This results in permanent loss of satellite operational data and potential redirection of the ground station to attacker-controlled servers, severely impacting the integrity and availability of the ground station's functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the Socket.IO server on port 7000 and disable or limit the database_backup event handler. Implement proper authentication enforcement and tighten CORS policies to prevent unauthorized connections.