/

CVE-2026-120461

Severity:

HIGH RISK

(8.8)

CVE-2026-120461

Deferred

Vulnerability type

Category:

CWE:

CWE-639

Impact:

Severity:

HIGH RISK

(8.8)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/dromara/Jpom/blob/v2.11.12/modules/server/src/main/java/org/dromara/jpom/controller/ssh/CommandInfoController.java#L176-L184
github.comgithub.com/dromara/Jpom/blob/v2.11.12/modules/server/src/main/java/org/dromara/jpom/service/node/ssh/SshCommandService.java#L167-L169
github.comgithub.com/dromara/Jpom/commit/ff09fe8095a792cea9c4b8babd93a333655d0a28
github.comgithub.com/dromara/Jpom/issues/120
vulncheck.comvulncheck.com/advisories/jpom-through-2.11.12-cross-workspace-authorization-bypass-via-node-ssh-command-batch
Find out what's already
exploitable in your codebase.