Vulnerabilities in Jexactyl

3 results

CVE-2026-107854MEDIUMJexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)EPSS 0.2%CVE-2026-107852HIGHJexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery)EPSS 0.2%CVE-2026-33061MEDIUMJexactyl has Stored DOM Cross-Site Scripting (XSS) via unescaped JSON in Blade templateEPSS 0.2%