[ Vendor · 3 CVEs ]
OpenC3
CVEs affecting OpenC3 published in the last 30 days, plus any OpenC3 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-77601 | 23 Sep 2026 | CVSS 8.8 | OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` settingOpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.12.0 until 7.3.0, an… | Fix |
| CVE-2026-77602 | 23 Sep 2026 | CVSS 9.9 | OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0… | Fix |
| CVE-2026-77394 | 23 Sep 2026 | CVSS 7.6 | OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widgetOpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.6 until 7.3.0, an… | Fix |