- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/20/2026, cosmos recorded 3 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of cosmos and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-77602OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)CVE-2026-77394OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widgetCVE-2026-77601OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` settingCVE-2026-42088OpenC3 COSMOS: Administrative Actions via the Script Runner ToolCVE-2026-42087OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base19 Results | Page 1 of 2