CyberSecBulletin

JNC vulnerabilities

We track 2 vulnerabilities in JNC products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest JNC vulnerabilities

  • 9.8 Critical severity

    IAQS: Missing Authentication for Critical Functionality

    CVE-2026-1364JNC

    IAQS and I6 developed by JNC has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly operate system administrative functionalities.

  • 9.8 Critical severity

    IAQS: Use of Client-Side Authentication

    CVE-2026-1363JNC

    IAQS and I6 developed by JNC has a Client-Side Enforcement of Server-Side Security vulnerability, allowing unauthenticated remote attackers to gain administrator privileges by manipulating the web front-end.