CVE-2026-55565General

LOWCVSS 9.9 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs LikeExpression.fillCode_getValueReturn in yamcs-core/src/main/java/org/yamcs/yarch/streamsql/LikeExpression.java inserts an unescaped LIKE pattern into Java source compiled by Expression.getCompiledExpression through SimpleCompiler.cook instead of applying ValueExpression.escapeJavaString. The pattern can originate from POST /api/archive/{instance}:executeSql, POST /api/archive/{instance}:streamSql, POST /api/archive/{instance}/tables/{table}:readRows, GET /api/archive/{instance}/events, or activity searches, including paths available with ReadTables, ReadEvents, or ReadActivities. A quote in the pattern can inject Java that runs as the Yamcs server process. This issue is fixed in versions 5.12.8 and 5.13.2.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
3 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
General: 1 classified signal
Disclosure: 1 classified signal
Peaked 1d ago at 2 mentions (2026-08-29); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

General

133.3%

PoC

133.3%

Disclosure

133.3%

Referenced assets1 URL

By indicator

https://exploitgrid.net/cve/CVE-2026-55565

Classification over time

Date	Total	Labels

2026-08-29	2	General1PoC1
2026-09-18	1	Disclosure1

Full discourse3 posts

bk@beyondkaira26d
Disclosure
BİZE ÇIKAN DERS Ders şu: bir arama kutusu arama yapmalı, kod yazmamalı. Kullanıcıdan gelen her metnin, çalıştırılmadan önce sınırı çizilmelidir. KAYNAK NVD, CVE-2026-55565, 28 Ağustos 2026, puan 9,9. Erişim: 12 Eylül 2026.
Post summary
The post announces or summarizes CVE-2026-55565 with NVD details and a high CVSS score, while adding a general lesson about input handling. It lacks PoC, exploit tooling, active exploitation, or explicit patch information.
1000027
4 followersView on X
ExploitGrid@exploitgrid46d
PoC
[CVE] CVE-2026-55565 [HIGH PRIORITY] #Yamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pat... 🔗 https://exploitgrid.net/cve/CVE-2026-55565
Post summary
The post announces CVE-2026-55565 as a high‑priority authenticated remote code execution flaw and provides a link that likely hosts a proof‑of‑concept, without mentioning an active exploitation or patch.
1000030
38 followersView on X
ExploitGrid@exploitgrid46d
General
🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-19295 - EXPLOIT CVE-2026-54745 CVE-2026-82222 CVE-2026-18527 CVE-2026-55565 ..🧵👇
Post summary
The digest lists several CVEs, marking one as "EXPLOIT" but gives no actionable details such as exploitation code or patches.
1000078
38 followersView on X

Explore more

Back to dashboard