CVE-2026-111605Published
Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111605 · Microsoft / collected KEV context
cve-program · CVE-2026-111605
- https://hackmd.io/@hieuPenguinnn/jpom-ssh-file-cross-workspace-idor
- https://github.com/dromara/Jpom/blob/v2.11.12/modules/server/src/main/java/org/dromara/jpom/controller/ssh/SshFileController.java#L44-L65
- https://github.com/dromara/Jpom
- https://www.vulncheck.com/advisories/jpom-through-2.11.12-cross-workspace-authorization-bypass-via-sshfilecontroller
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.