I6 vulnerabilities

2 known vulnerabilities in I6 from JNC. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  IAQS: Missing Authentication for Critical Functionality

  CVE-2026-1364Jan 23, 2026JNC

  IAQS and I6 developed by JNC has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly operate system administrative functionalities.

• 9.8 Critical severity

  IAQS: Use of Client-Side Authentication

  CVE-2026-1363Jan 23, 2026JNC

  IAQS and I6 developed by JNC has a Client-Side Enforcement of Server-Side Security vulnerability, allowing unauthenticated remote attackers to gain administrator privileges by manipulating the web front-end.