CVE-2026-42088

< 7.0.0

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to v

9.6CRITICAL

CVE-2026-42087

>= 6.7.0 and < 7.0.0

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From versi

9.6CRITICAL

CVE-2026-42086

< 7.0.0

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to v

4.6MEDIUM

CVE-2026-42085

< 6.10.5

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to v

4.3MEDIUM

CVE-2026-42084

< 6.10.5

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to v

8.1HIGH

CVE-2025-28389

all versions

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

9.8CRITICAL

CVE-2025-28388

all versions

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

9.8CRITICAL

CVE-2025-28386

all versions

A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute

9.8CRITICAL

CVE-2025-28384

all versions

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

9.1CRITICAL

CVE-2025-28382

all versions

An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

7.5HIGH

CVE-2025-28381

all versions

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in

7.5HIGH

CVE-2025-28380

all versions

A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows attackers to execute arbitrary web scripts or HTM

6.1MEDIUM

CVE-2024-47529

< 5.19.0

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COS

6.5MEDIUM

CVE-2024-46977

< 5.19.0

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path tra

6.5MEDIUM

CVE-2024-43795

< 5.19.0

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login

6.1MEDIUM