dromara Jpom vulnerabilities and fixes
Exploited and high-severity dromara Jpom vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.8CVE-2026-120460Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker ControllersFix availabledromara Jpom
1 min read - 8.8CVE-2026-120461Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batchFix availabledromara Jpom
1 min read - 9.3CVE-2026-120201Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN HeaderVerify fixdromara Jpom
1 min read