CyberSecBulletin

Jmpsec vulnerabilities

We track 2 vulnerabilities in Jmpsec products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2026.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Jmpsec vulnerabilities

  • 8.7 High severity

    osctrl: Improper Neutralization of Input During Web Page Generation

    CVE-2026-28280Jmpsec

    osctrl is an osquery management solution. Prior to version 0.5.0, a stored cross-site scripting (XSS) vulnerability exists in the `osctrl-admin` on-demand query list. A user with query-level permissions can inject arbitrary JavaScript via the query parameter w

  • 8.4 High severity

    osctrl: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-28279Jmpsec

    osctrl is an osquery management solution. Prior to version 0.5.0, an OS command injection vulnerability exists in the `osctrl-admin` environment configuration. An authenticated administrator can inject arbitrary shell commands via the hostname parameter when c