CVE-2026-32294
JetKVM insufficient firmware verification
Summary
JetKVM insufficient firmware verification
Original description
The description as published by the source.
JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web raw.githubusercontent.com
- web cve.org
- web eclypsium.com