‹ Volver al listado

CVE-2026-112159

Estado: AplazadaBaja (2)—
Gravedad2Baja · CVSS 4.0
Probabilidad de explotación0.86 %mayor que el 58 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado

Se ha detectado una vulnerabilidad de seguridad en JumpServer hasta la versión 4.10.19. El elemento afectado es una función desconocida del componente Template Rendering. La manipulación del argumento IP/HOST conduce a una inyección de comandos del sistema operativo. Es posible la explotación remota del ataque. El exploit se ha hecho público y puede utilizarse. Actualizar a la versión 5.0.0 es suficiente para corregir este problema. El identificador del parche es fcf2904cdb884230e9676f50f37a44d09fa97040. El componente afectado debe actualizarse. El proveedor confirma: "Este problema se identificó hace bastante tiempo, y ya lo hemos corregido en la rama v5. (...) La corrección también se incluirá en una próxima versión v4."

Traducción automática del texto original de NVD (en inglés).

CVSS

Puntuación base
2
Versión
4.0
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días
0.86 %
Percentil entre todas las CVEs puntuadas
58
Fecha de la puntuación
20/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Inferido por reglas deterministas a partir del vector CVSS y la CWE. Solo orientativo.

Mitigaciones ATT&CK que cubren estas técnicas

Restrict Web-Based ContentPrivileged Account ManagementLimit Software InstallationExecution PreventionBehavior Prevention on EndpointDisable or Remove Feature or Program

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Jumpserver — JumpserverAI

CWE

Referencias

Mostrar las 9 referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-112159",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.1
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "cna@vuldb.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 2,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "PASSIVE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "LOW",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "LOW",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "cna@vuldb.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:jumpserver:jumpserver:*:*:*:*:*:*:*:*"
          ],
          "vendor": "n/a",
          "modules": [
            "Template Rendering"
          ],
          "product": "JumpServer",
          "versions": [
            {
              "status": "affected",
              "version": "4.10.0"
            },
            {
              "status": "affected",
              "version": "4.10.1"
            },
            {
              "status": "affected",
              "version": "4.10.2"
            },
            {
              "status": "affected",
              "version": "4.10.3"
            },
            {
              "status": "affected",
              "version": "4.10.4"
            },
            {
              "status": "affected",
              "version": "4.10.5"
            },
            {
              "status": "affected",
              "version": "4.10.6"
            },
            {
              "status": "affected",
              "version": "4.10.7"
            },
            {
              "status": "affected",
              "version": "4.10.8"
            },
            {
              "status": "affected",
              "version": "4.10.9"
            },
            {
              "status": "affected",
              "version": "4.10.10"
            },
            {
              "status": "affected",
              "version": "4.10.11"
            },
            {
              "status": "affected",
              "version": "4.10.12"
            },
            {
              "status": "affected",
              "version": "4.10.13"
            },
            {
              "status": "affected",
              "version": "4.10.14"
            },
            {
              "status": "affected",
              "version": "4.10.15"
            },
            {
              "status": "affected",
              "version": "4.10.16"
            },
            {
              "status": "affected",
              "version": "4.10.17"
            },
            {
              "status": "affected",
              "version": "4.10.18"
            },
            {
              "status": "affected",
              "version": "4.10.19"
            },
            {
              "status": "unaffected",
              "version": "5.0.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-10-19T17:17:13.947",
  "references": [
    {
      "url": "https://gist.github.com/Seikruun/b628bb6d4403d9c41a54a4b92d775583",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://github.com/jumpserver/jumpserver/",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://github.com/jumpserver/jumpserver/commit/fcf2904cdb884230e9676f50f37a44d09fa97040",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://github.com/jumpserver/jumpserver/pull/17500/",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://github.com/jumpserver/jumpserver/releases/tag/v5.0.0",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/cve/CVE-2026-112159",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/submit/964676",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/vuln/422286",
      "source": "cna@vuldb.com"
    },
    {
      "url": "https://vuldb.com/vuln/422286/cti",
      "source": "cna@vuldb.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "cna@vuldb.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        },
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 5.0.0 is sufficient to fix this issue. The identifier of the patch is fcf2904cdb884230e9676f50f37a44d09fa97040. The affected component should be upgraded. The vendor confirms: \"This issue was identified quite some time ago, and we have already fixed it in the v5 branch. (...) The fix will also be included in an upcoming v4 release."
    }
  ],
  "lastModified": "2026-10-19T20:43:24.237",
  "sourceIdentifier": "cna@vuldb.com"
}