CVE-2026-32294
JetKVM insufficient firmware verification
概要
JetKVM insufficient firmware verification
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web raw.githubusercontent.com
- web cve.org
- web eclypsium.com