CVE-2026-55566 | Yamcs up to 5.12.7/5.13.1 URL extension.matcher.ts cross site scripting

August 28, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Yamcs up to 5.12.7/5.13.1. Impacted is an unknown function of the file yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts of the component URL Handler. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-55566. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More