CVE-2026-32294
JetKVM insufficient firmware verification
Résumé
JetKVM insufficient firmware verification
Description d'origine
La description telle que publiée par la source (souvent en anglais).
JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web raw.githubusercontent.com
- web cve.org
- web eclypsium.com