Product by Dromara

    Jpom

    5 known vulnerabilities in Jpom (Dromara), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Jpom (Dromara)
    CriticalCVE-2026-120201

    Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header

    		9.8
    HighCVE-2026-111605

    Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

    		8.1
    HighCVE-2026-120461

    Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

    		8.8
    HighCVE-2026-120460

    Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers

    		8.8
    MediumCVE-2026-91993

    Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list

    		4.3

    All products by Dromara