Skip to content
OpenAdvisories
High · 7.5 CVE-2026-32295 EUVD-2026-12608

JetKVM insufficient login rate limiting

Published Mar 17, 2026 · Updated Mar 17, 2026 · Assigned by cisa-cg

Vendor: JetKVM Product: JetKVM

Description

JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials.

Affected products

VendorProductAffectedFixed
JetKVM JetKVM < 0.5.4 0.5.4

Advisories 1

References