Openc3

9 CVEs across 1 Openc3 products. Browse Openc3 vulnerabilities, severities, and proof-of-concept exploits.

Openc3 products with known CVEs

ProductCVEs
Cosmos16
Openc3 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-42088Critical9.62026-05-04OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script…
CVE-2026-42087Critical9.62026-05-04OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7…
CVE-2026-42086Medium4.62026-05-04OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0, the Command Sen…
CVE-2026-42085Medium4.32026-05-04OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3…
CVE-2026-42084High8.12026-05-04OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3…
CVE-2025-68271Critical10.02026-01-13OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS con…
CVE-2025-28389Critical9.82025-06-13Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.
CVE-2025-28388Critical9.82025-06-13OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.
CVE-2025-28386Critical9.82025-06-13A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading…
CVE-2025-28384Critical9.12025-06-13An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.
CVE-2025-28382High7.52025-06-13An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.
CVE-2025-28381High7.52025-06-13A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.
CVE-2025-28380Medium6.12025-06-13A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted pay…
CVE-2024-47529Medium6.52024-10-02OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a…
CVE-2024-46977Medium6.52024-10-02OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside o…
CVE-2024-43795Medium6.12024-10-02OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a refl…