Research by: Ricardo Fradique, Andrzej Olchawa, Tanner Smith,  Milenko Starcik (Publication) Three findings from our continued security research into Yamcs are now documented in public security advisories. Two have assigned CVE identifiers: CVE-2026-62329, covering automatically created administrator credentials, and CVE-2026-55566, covering DOM-based cross-site scripting. The third concerns a bypass of authentication-endpoint rate limiting. The default-administrator…