CVE-2026-32295

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-32295

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32295.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-32295

Published

2026-03-17T17:19:39Z

Modified

2026-10-28T02:30:48Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H CVSS Calculator

Summary

JetKVM insufficient login rate limiting

Details

JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials.

Database specific

{
    "cna_assigner": "cisa-cg",
    "cwe_ids": [
        "CWE-307"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32295.json"
}

References

Affected packages

Git / github.com/jetkvm/kvm

Affected ranges

Type

GIT

Repo

https://github.com/jetkvm/kvm

Events

Introduced

Fixed

8e7b6ce4e3e699440507d049c83ef9689b5557b3

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.5.4"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "cpe": "cpe:2.3:a:jetkvm:kvm:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "0.5.3"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

0.*

0.5.0-dev202511271013

0.5.0-dev202511271020

Other

challenge-base

release/0.*

release/0.4.0

release/0.4.1

release/0.4.5

release/0.4.5-rc1

release/0.4.5-rc2

release/0.4.6

release/0.4.7

release/0.5.0

release/0.5.0-dev20251120

release/0.5.0-dev202511211223

release/0.5.0-dev202512051510

release/0.5.1

release/0.5.1-dev202512181144

release/0.5.1-dev202512181609

release/0.5.1-dev202512181840

release/0.5.1-dev202512211114

release/0.5.2

release/0.5.2-dev202512291946

release/0.5.2-dev202601051816

release/0.5.2-dev202601061215

release/0.5.2-dev202601070032

release/0.5.2-dev202601070105

release/0.5.2-dev202601071426

release/0.5.3

release/0.5.3-dev202601281951

release/0.5.3-dev202602061404

release/0.5.4-dev202602080922

release/0.5.4-dev202603060949

release/0.5.4-dev202603061013

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-32295.json"