What’s Vulnerable › Products

dromara Jpom vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your dromara Jpom version is affected

Latest dromara Jpom vulnerabilities

• CVE-2026-120201 — Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header (CVSS 9.8)
• CVE-2026-111605 — Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController (CVSS 8.1)
• CVE-2026-91993 — Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list (CVSS 4.3)