GCVE - cpe:2.3:a:openc3:cosmos:6.0.0:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openc3:cosmos:6.0.0:*:*:*:enterprise:*:*:*

part: a version: 6.0.0 update: *

Vendor	Openc3 (`680b44f3-6e76-5e98-b975-ca8c40bfc888`)
Product	Cosmos (`abb9c791-e972-59ee-a659-075eb1ba52a5`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-28389`	vulnerable	2026-06-08 07:14:56.081822	Details available Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack. Published: 2025-06-13T00:00:00.000Z Updated: 2025-06-13T15:46:51.750Z Open on db.gcve.eu Reference links https://openc3.com/ https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28388`	vulnerable	2026-06-08 07:14:56.081416	Details available OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account. Published: 2025-06-13T00:00:00.000Z Updated: 2025-10-27T15:14:05.147Z Open on db.gcve.eu Reference links https://openc3.com/ https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/ https://github.com/OpenC3/cosmos/releases/tag/v6.0.2 https://github.com/OpenC3/cosmos/pull/1816 https://github.com/OpenC3/cosmos/pull/1816/commits/195974a019f375f7c5a35f48e4151babb40649ac	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28386`	vulnerable	2026-06-08 07:14:56.080888	Details available A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading a crafted .txt file. Published: 2025-06-13T00:00:00.000Z Updated: 2025-06-17T18:17:06.560Z Open on db.gcve.eu Reference links https://openc3.com/ https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28384`	vulnerable	2026-06-08 07:14:56.080311	Details available An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal. Published: 2025-06-13T00:00:00.000Z Updated: 2025-10-27T15:25:57.870Z Open on db.gcve.eu Reference links https://openc3.com/ https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/ https://github.com/OpenC3/cosmos/releases/tag/v6.1.0 https://github.com/OpenC3/cosmos/pull/1828 https://github.com/OpenC3/cosmos/pull/1828/commits/fc7e11310a7cdf9f1939886e1b29009db4d4b718	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28382`	vulnerable	2026-06-08 07:14:56.080011	Details available An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal. Published: 2025-06-13T00:00:00.000Z Updated: 2025-10-27T15:34:02.549Z Open on db.gcve.eu Reference links https://openc3.com/ https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/ https://github.com/OpenC3/cosmos/releases/tag/v6.1.0 https://github.com/OpenC3/cosmos/pull/1828 https://github.com/OpenC3/cosmos/commit/fc7e11310a7cdf9f1939886e1b29009db4d4b718	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28381`	vulnerable	2026-06-08 07:14:56.078730	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-28380`	vulnerable	2026-06-08 07:14:56.078369	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.