Skip to content
OpenAdvisories

Vendor

Jexactyl

3 known vulnerabilities.

Products

Jexactyl 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-107854

    Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)

    Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_id and loads the server without restricting the lookup to servers owned by the a…

    Jexactyl Jexactyl
  • Medium 5.8
    CVE-2026-33061

    Jexactyl has Stored DOM Cross-Site Scripting (XSS) via unescaped JSON in Blade template

    Jexactyl is a customisable game management panel and billing system. Commits after 025e8dbb0daaa04054276bda814d922cf4af58da and before e28edb204e80efab628d1241198ea4f079779cfd inject server-side objects into client-side JavaScript through resources/views/temp…

    Jexactyl Jexactyl