HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-53985 — Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vuln...

·Source: NIST NVD

Updated:

Executive Summary

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restart_service command. Attackers can connect to the Socket.IO server on port 7000 without credentials due to disabled authentication enfor

Analysis

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restart_service command. Attackers can connect to the Socket.IO server on port 7000 without credentials due to disabled authentication enforcement and a wildcard CORS policy, then emit the service_control event to terminate all active satellite-tracking sessions, SDR recording pipelines, demodulators, decoders, and rotator controllers, with repeated triggering possible in Docker deployments to create a persistent denial-of-service condition. CVSS Score: 7.5. Published: 2026-08-06T16:16:43.620.

Indicators of Compromise (1)

CVE (1)
CVE-2026-53985
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate

North Carolina Ports is recovering from a cyberattack after its IT system was “hacked by an outside actor or group,” requiring a switch to manual processing of operations.

The Record
MEDIUMVulnerability

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION. On an AMD Zen 2 machine running Linux 6.14 with every default Spectre v2 mitigation on,

The Hacker News
HIGHVulnerability

NVD HIGH: CVE-2026-53977 — OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows u...

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler chain. Attackers can exploit the route registration order in bootstrap-runtime.js to reach the shutdown ha

CVE-2026-53977
NIST NVD