CVE-2026-120461

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

CVE-2026-120461

The Jpom software (versions through 2.11.12 ) is susceptible to a cross-workspace authorization bypass via the POST /node/ssh_command/batch endpoint. The root cause is that the system resolves command templates and SSH nodes by ID without applying workspace filtering . This allows authenticated u...

CVE-2026-120461 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

EUVD-2026-115221

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

CVE-2026-120461 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

CVE-2026-120461 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

PT-2026-135477

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh command/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs t...

CVE-2026-111605

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-111605 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-111605

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-111605 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

EUVD-2026-103027

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-111605 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-111605

Jpom versions through 2.11.12 are vulnerable to a cross-workspace authorization bypass in the SshFileController component. This vulnerability allows authenticated users to access SSH hosts belonging to different workspaces by providing unauthorized SSH asset IDs. Attackers with SSH file permissio...

CVE-2026-111605: Authorization Bypass Through User-Controlled Key

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

PT-2026-116004

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

Dromara Jpom authorization issue vulnerability

Dromara Jpom 2.11.12 and earlier versions have an authorization issue vulnerability. This vulnerability stems from an authorization bypass in SshFileController. Attackers can access SSH hosts in other workspaces by providing external SSH asset IDs. Attackers with SSH file permissions can call...

CVE-2026-53542 Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands...

CVE-2026-53542

CVE-2026-53542 is a tar option injection vulnerability in Termix , a web-based server management platform, prior to version 2.3.2. The archive creation endpoint in src/backend/ssh/file-manager.ts passes user-selected file basenames to tar without an end-of-options marker (--) and without ensuring...

New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems

Cybersecurity researchers have uncovered a new cloud targeting, peer-to-peer P2P worm called P2PInfect that targets vulnerable Redis instances for follow-on exploitation. "P2PInfect exploits Redis servers running on both Linux and Windows Operating Systems making it more scalable and potent than...