CVE-2026-105105

{
  "etk_id": "ETK-2026-455",
  "cve_id": "CVE-2026-105105",
  "display_id": "CVE-2026-105105",
  "ghsa_id": "GHSA-9xfm-37f4-2h8g",
  "euvd_id": "EUVD-2026-92014",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Missing authentication in AIT-Core ait-server broker",
  "summary": "AIT-Core versions through 3.1.1 expose the ait-server ZeroMQ command and telemetry broker without authentication under its default network binding. An unauthenticated party that can reach the broker may observe or manipulate telemetry and command traffic, including disrupting bus operations. Exposure requires network access to the broker endpoints.",
  "mitigation": "Upgrade AIT-Core to version 3.1.2 or later. Until upgraded, restrict broker network access to trusted systems and prevent the ZeroMQ endpoints from being exposed to untrusted networks.",
  "vendor": "nasa-ammos",
  "product": "AIT-Core",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.1.1"
      ],
      "ecosystem": "pypi",
      "fixed_versions": [],
      "package_name": "ait-core",
      "purl": "pkg:pypi/ait-core"
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0078,
  "epss_percentile": 0.5528,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 56.02821465,
  "t0_at": "2026-10-03T11:55:44.853000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-19T14:41:23+00:00",
      "days": 16.115024849537036,
      "is_lower_bound": false,
      "measured_at": "2026-10-03T11:55:44.853000+00:00",
      "url": "https://github.com/Mothra-1/CVE-2026-105105"
    },
    "trigger_signal": {
      "at": "2026-10-03T11:55:44.853000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-03T11:55:44.853000+00:00",
      "url": "https://github.com/advisories/GHSA-9xfm-37f4-2h8g"
    }
  }
}