CVE-2026-1290

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

CVE-2026-1290

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

CVE-2026-1290

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

CVE-2026-1290

CVE-2026-1290 affects Jamf Pro 11.20–11.24. The issue is described as Authentication Bypass by Primary Weakness with a CVSS v4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/SC:L/VI:N/SI:N/VA:N/SA:N) and a base score of 5.3 (Medium). The Red Hat, CIRCL, NVD, and CVE List entries reiterate the same affec...

CVE-2026-1290 [PI141230] Fixed A broken access control issue.

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

CVE-2026-1290 [PI141230] Fixed A broken access control issue.

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

EUVD-2026-3663

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

PT-2026-3775

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

Jamf Pro security vulnerabilities

Jamf Pro is a set of Apple device management solutions provided by the American company Jamf. Versions 11.20 to 11.24 of Jamf Pro contain security vulnerabilities. These vulnerabilities stem from critical weaknesses that allow authentication bypass, potentially causing unspecified impacts...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2018-10465

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API UAPI, regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges...

EUVD-2018-2537

Malware in sbrugna...

EUVD-2021-25664

Malware in sbrugna...

EUVD-2021-21684

Malware in sbrugna...

EUVD-2019-7547

Malware in sbrugna...

EUVD-2021-17065

Malware in sbrugna...

EUVD-2021-27973

Malicious code in bioql PyPI...

EUVD-2024-32963

Malicious code in bioql PyPI...

CVE-2024-10183

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...