CVE-2026-71289

critical · 9.8

The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089, e.g. ":8089/tcp") with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access Manager) gateway that is otherwise the system's sole authentication boundary.

9.8

CVSS

0.4%

EPSS (exploit prob.)

38th

EPSS percentile

2026-08-05

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-306

References

https://github.com/JHUAPL-DTNMA/dtnma-tools
https://github.com/NASA-AMMOS/anms

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-71289