Skip to content
OpenAdvisories

Vendor

jumpserver

27 known vulnerabilities.

Products

jumpserver 27
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-31864 Public exploit

    JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering

    JumpServer is an open source bastion host and an operation and maintenance security audit system. a Server-Side Template Injection (SSTI) vulnerability exists in JumpServer's Applet and VirtualApp upload functionality. This vulnerability can only be exploited…

    jumpserver jumpserver