CyberSecBulletin

Jpillora vulnerabilities

We track 2 vulnerabilities in Jpillora products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Jpillora vulnerabilities

  • 8.5 High severity

    chisel: Incorrect Authorization

    CVE-2026-48113Jpillora

    Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only du

  • 8.6 High severity

    chisel: Missing Authentication for Critical Functionality

    CVE-2024-43798Jpillora

    Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. Any