Critical NASA-AMMOS AIT-Core ZeroMQ Remote Code Execution

🔓 CVEs & KEV

• CVE-2026-105105 — NASA-AMMOS AIT-Core — CVSS 9.8 — Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacec...

• CVE-2026-83632 — Apache Software Foundation Apache Thrift — CVSS 9.2 — Apache Thrift: C++ THttpTransport grows its line buffer without boundAllocati...

• CVE-2026-66081 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift: c_glib read_message_begin leaves output parameters unset for n...

• CVE-2026-66837 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled st...

• CVE-2026-66858 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Ap...

• CVE-2026-66859 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift: c_glib multiplexed processor crashes on a message it cannot ro...

• CVE-2026-83663 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per f...

• CVE-2026-83745 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload b...

• CVE-2026-96277 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift: Ruby SimpleServer ends serve() on any non-Transport/Protoc...

• CVE-2026-94658 — Apache Software Foundation Apache Thrift — CVSS 8.7 — Apache Thrift: Lua TFramedTransport/THttpTransport re-slice the buffer on...

• CVE-2026-85476 — Apache Software Foundation Apache Thrift — CVSS 8.2 — Apache Thrift: c_glib read_all spins when the underlying read returns 0Loop...

• CVE-2026-96289 — Apache Software Foundation Apache Thrift — CVSS 8.2 — Apache Thrift: php --gen php:inlined struct readers (and `TProtocol::skipBi...

• CVE-2026-96287 — Apache Software Foundation Apache Thrift — CVSS 8.2 — Apache Thrift: Perl FramedTransport reads and TLS socket writes re-slice th...

• CVE-2026-96286 — Apache Software Foundation Apache Thrift — CVSS 8.2 — Apache Thrift: Perl servers end serve() when serving one connection failsUn...

• CVE-2026-94657 — Apache Software Foundation Apache Thrift — CVSS 8.2 — Apache Thrift: javame TJsonProtocol/TJSONProtocol has no string size boun...

• CVE-2026-104733 — ProcessOne ejabberd — CVSS 7.4 — User Impersonation/Authorization Bypass in XMPP Server ejabberdUser Impersona...

• CVE-2026-66331 — Apache Software Foundation Apache Thrift — CVSS 6.9 — Apache Thrift: Buffered transport reads are not accounted against MaxMessageS...