jumpserver has 2 CVEs on record between 2023 and 2026. 1 was published in the last 90 days. The median CVSS is 6.2 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.2
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Weakness classes
Products
- github.com/jumpserver/koko 1
- jumpserver 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
jumpserver vulnerabilities
CVEs affecting jumpserver, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-104126Medium· 6.0JumpServer is an open source bastion host and an operation and maintenance security audit system
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who …
▾ Sunlitjumpserver · jumpserverEPSS 0.38%via NVD
CVE-2023-43651Medium· 6.4Jumpserver Koko vulnerable to remote code execution on the host system via MongoDB shell
Jumpserver Koko vulnerable to remote code execution on the host system via MongoDB shell
▾ Sunlitjumpserver · github.com/jumpserver/kokoEPSS 2.1%via OSV