JumpServer vulnerabilities
CVEs whose affected-version data names the JumpServer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112159Medium· 5.5JumpServer Template Rendering os command injection
A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote explo…
▾ Sunlitvia CVEORG
CVE-2026-104126Medium· 6.0JumpServer is an open source bastion host and an operation and maintenance security audit system
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who …
▾ Sunlitjumpserver · jumpserverEPSS 0.38%via NVD