Login Request a demo
JU
Vendor
jumpserver
1 product with CVEs on record
14
CVEs
0
On KEV
2
New 30D
Products
JU
jumpserver
jumpserver
9.8
14 CVEs0 on KEV2 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112159
JU
JumpServer
Jumpserver
5.5
1%
Oct 19JumpServer Template Rendering os command injection
CVE-2026-104126
JU
jumpserver
jumpserver
6.0
0%
Oct 13JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation
CVE-2026-44846
JU
jumpserver
jumpserver
6.2
0%
Aug 17JumpServer: Privilege Overwrite via Organization Invite Logic Flaw
CVE-2026-44845
JU
jumpserver
jumpserver
6.7
1%
Aug 17JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment
CVE-2026-54336
JU
jumpserver
jumpserver
5.4
0%
Aug 17JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset
CVE-2026-31864
JU
jumpserver
jumpserver
6.8
0%
Mar 13JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering
CVE-2026-31798
JU
jumpserver
jumpserver
5.0
0%
Mar 13JumpServer Improper Certificate Validation in Custom SMS API Client
CVE-2025-58044
JU
jumpserver
jumpserver
6.1
0%
Dec 1JumpServer has an Open Redirect Vulnerability
CVE-2025-62795
JU
jumpserver
jumpserver
7.1
0%
Oct 30JumpServer Unauthorized LDAP Configuration Access via WebSocket
CVE-2025-62712
JU
jumpserver
jumpserver
8.1
0%
Oct 30JumpServer Connection Token Leak Vulnerability
CVE-2025-27095
JU
jumpserver
jumpserver
4.3
0%
Mar 31JumpServer has a Kubernetes Token Leak Vulnerability
CVE-2024-40628
JU
jumpserver
jumpserver
9.1
1%
Jul 18Arbitrary File Read in Ansible Playbooks in Jumpserver
CVE-2024-40629
JU
jumpserver
jumpserver
9.8
1%
Jul 18Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
CVE-2021-3169
JU
Jumpserver
Jumpserver
9.8
3%
Jul 23An issue in Jumpserver before 2.6.2, before 2.5.4, before 2.4.5 allows attackers to create a connection token through an API which does not have access control and use it to…