Login Request a demo
JU
Product
jumpserver
by jumpserver · last CVE Oct 19, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 2Medium 9Low 0
Severity
All severities12Critical1High2Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add jumpserver to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31864
6.8
0%
Mar 13
JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering
Affected: < 3.10.22; >= 4.0.0, < 4.10.16
CVE-2026-44845
6.7
1%
Aug 17
JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment
Affected: < 4.10.17
CVE-2026-44846
6.2
0%
Aug 17
JumpServer: Privilege Overwrite via Organization Invite Logic Flaw
Affected: < 4.10.17
CVE-2025-58044
6.1
0%
Dec 1
JumpServer has an Open Redirect Vulnerability
Affected: < 3.10.19; >= 4.0.0, < 4.10.5
CVE-2026-104126
6.0
0%
Oct 13
JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation
Affected: < 4.10.17
CVE-2026-112159
5.5
1%
Oct 19
JumpServer Template Rendering os command injection
Affected: 4.10.0; 4.10.1; 4.10.2; 4.10.3; 4.10.4; 4.10.5; +14 more
CVE-2026-54336
5.4
0%
Aug 17
JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset
Affected: >= 4.8.0, < 4.10.17
CVE-2026-31798
5.0
0%
Mar 13
JumpServer Improper Certificate Validation in Custom SMS API Client
Affected: < 4.10.16-lts
CVE-2025-27095
4.3
0%
Mar 31
JumpServer has a Kubernetes Token Leak Vulnerability
Affected: < 3.10.18; >= 4.0.0, < 4.8.0
Showing 9