Advisories · Technology

Jexactyl.

Every CVE that names Jexactyl among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107854 CVE record

CVSS 5.4 Medium

Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)
- Jexactyl
- Broken access control
Not analysed yet 9 Oct 2026
CVE-2026-107852 CVE record

CVSS 7.1 High

Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery)
- Jexactyl
- CWE-345
Not analysed yet 9 Oct 2026
CVE-2026-33061 CVE record

CVSS 5.8 Medium

Jexactyl has Stored DOM Cross-Site Scripting (XSS) via unescaped JSON in Blade template
- Jexactyl
- Cross-site scripting (XSS)
Not analysed yet 20 Mar 2026