Beveiligingsadvies

CVE-2026-32294

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-17 17:19:22
Laatst bijgewerkt 2026-03-17 18:12:13
Toegewezen door cisa-cg
CVSS-score 7.0
Status PUBLISHED

Beschrijving

JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.