4.7 MediumCWE-345
CVE-2026-32294
JetKVM insufficient firmware verification
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.1%probability of exploitation in the next 30 days
Higher than 2% of scored CVEs
SeverityCVSS
4.7Medium
Description NVD
JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.
Coverage 1 article · 1 outlet
- 9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four VendorsThe Hacker News · first in our coverage · mentions it in passing