Vulnerabilities in jahlives

30 results
Vexday analysis

Jahlives apresenta um panorama de risco acelerado: 30 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, incluindo 16 críticas. Não há evidência de exploração ativa documentada (KEV = 0), mas o volume recente e a prevalência de falhas de autenticação (CWE-345) exigem atenção imediata. O perfil sugere questões estruturais na segurança do desenvolvimento.

CVE-2026-74872CRITICALopenssl_encrypt before 1.4.0 Arbitrary Code Execution via WhirlpoolEPSS 0.5%CVE-2026-74895CRITICALopenssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process IsolationEPSS 0.4%CVE-2026-74886CRITICALopenssl_encrypt before 1.4.0 Plugin Import Guard BypassEPSS 0.4%CVE-2026-74894CRITICALopenssl_encrypt before 1.4.0 Authentication Bypass via Bearer TokenEPSS 0.4%CVE-2026-74899CRITICALopenssl_encrypt before 1.4.0 Sandbox Escape via Type HierarchyEPSS 0.4%CVE-2026-74878CRITICALopenssl_encrypt before 1.4.0 TOTP Rate Limiter BypassEPSS 0.4%CVE-2026-74900CRITICALopenssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation ModeEPSS 0.3%CVE-2026-74896CRITICALopenssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute TraversalEPSS 0.3%CVE-2026-74880CRITICALopenssl_encrypt before 1.4.0 Token Leakage via Query ParametersEPSS 0.3%CVE-2026-74892HIGHopenssl_encrypt before 1.4.0 Hardcoded Secret KeyEPSS 0.3%CVE-2026-74891HIGHopenssl_encrypt before 1.4.0 Hardcoded Database CredentialsEPSS 0.3%CVE-2026-74881HIGHopenssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard OriginsEPSS 0.3%CVE-2026-74884HIGHopenssl_encrypt before 1.4.0 Path Traversal via plugin_idEPSS 0.3%CVE-2026-74893HIGHopenssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded SecretsEPSS 0.3%CVE-2026-74877HIGHopenssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_keyEPSS 0.3%CVE-2026-74879HIGHopenssl_encrypt before 1.4.0 Information Disclosure via /ready endpointEPSS 0.3%CVE-2026-74883HIGHopenssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and ioEPSS 0.3%CVE-2026-74874HIGHopenssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel SelectionEPSS 0.3%CVE-2026-74901CRITICALopenssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR FallbackEPSS 0.2%CVE-2026-74873HIGHopenssl_encrypt before 1.4.0 Password Exposure via CLI ArgumentEPSS 0.2%