GHSA-wwmv-hj9m-4mcc

Ground-Station Telemetry Interface Socket.IO Vulnerability Enables Unauthenticated Database Injection and Takeover (CVE-2026-103244)

An authentication bypass and SQL injection in ground-station before v0.8.0 allows remote attackers to plant admin accounts and seize telemetry consoles.