Threats tagged 'ghsa-p73q-wm5v-6vh6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.7%	CVE-2026-71289NASA-AMMOS anms · Missing Authentication Critical9.8EPSS 0.7%2026-08-05CVE Database V5CVE-2026-71289 The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089, e.g. ":8089/tcp") with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access Manager) gateway that is otherwise the system's sole authentication boundary. EPSS 0.7%Vulnerability CWE-306 #ghsa-p73q-wm5v-6vh6	CVE Database V5	2026-08-05

Page 1 of 1