Jpom 2.10.0-2.11.12 - Authentication Bypass

Jpom 2.10.0 through 2.11.12 contains an authentication bypass caused by injection of query conditions into the JPOM-USER-TOKEN header, letting unauthenticated attackers gain super-administrator access and execute commands, exploit requires crafted header injection. id: CVE-2026-120201 info: name:...