Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fields is interpreted as \"use the only user\" rather than as invalid credentials, and the server returns a fully authenticated session. Because the service listens on all interfaces (0.0.0.0) without TLS by default, an unauthenticated remote attacker with network access to port 3334 can obtain an authenticated session without knowing any credential and then issue privileged commands, including commanding connected drones and uploading flight routes.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-59104 · CRITICAL · CVSS 9.8 UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. CVSS 3.1 · ENISA https://cve.new/CVE-2026-59104
🚨 Remote Drone Hijacking in UgCS Ground Control (CVE-2026-59104, CVSS 9.8) HCI port 3334 interprets empty credentials as use-only-user, granting full unauthenticated control over connected drones! ⚡ Action: Upgrade to 6.2. https://www.thehackerwire.com/vulnerability/CVE-2026-59104/ #DroneSecurity #IoT https://t.co/JRlGKwWmKY
🆕 New CVE SPH Engineering UgCS: authentication bypass in server HCI interface (CVE-2026-59104) A remote attacker can gain full access without logging in, then control connected drones and upload flight routes. Patch → 6.2 https://cve.now/CVE-2026-59104?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical
CVE-2026-59104 UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains ex… https://www.cve.org/CVERecord?id=CVE-2026-59104
🆕 New CVE: CVE-2026-59104 (CVSS 9.8) SPH Engineering UgCS · Authentication bypass Remote, no login needed. UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. https://app.enclave.ai/threat-feed/CVE-2026-59104