Advisories · Technology

CyferShepard Jellystat.

Every CVE that names CyferShepard Jellystat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-41167 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Jellystat has SQL Injection that leads to to Remote Code Execution
- CyferShepard Jellystat
- SQL injection
Not analysed yet 22 Apr 2026
CVE-2025-24960 CVE record

CVSS 8.7 High

Missing Input validation for filename in backups endpoint in Jellystat
- CyferShepard Jellystat
- Path traversal
Not analysed yet 3 Feb 2025