Skip to content
OpenAdvisories

Vendor

jetlinks

2 known vulnerabilities.

Products

JetLinks Community 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-110110

    JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disable Endpoints

    JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController _enable and _disable endpoints lack the save action annot…

    jetlinks JetLinks Community
  • Medium 6.5
    CVE-2026-110109

    JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec Save

    JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/{productId}. Because the endpoint lacks @SaveAction, …

    jetlinks JetLinks Community