CVE-2026-32294: Insufficient Verification of Data Authenticity

JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification...

CVE-2026-32295: Improper Restriction of Excessive Authentication Attempts

JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials...

JetKVM 安全漏洞

JetKVM is an open-source remote computer management tool developed by JetKVM. Versions of JetKVM prior to 0.5.4 contained security vulnerabilities. These vulnerabilities stemmed from the lack of verification of the authenticity of downloaded firmware files. This could allow intermediate parties o...