https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 11:21:07 +0000 https://db.gcve.eu/vuln/cve-2026-120201 <p><strong>Affected:</strong> dromara Jpom</p> <p>Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like &#39;is not null&#39;, which Hutool&#39;s Condition parser treats as an operator, then execute commands through Jpom&#39;s script features.</p> <p><strong>Affected:</strong> dromara Jpom</p> <p>Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like &#39;is not null&#39;, which Hutool&#39;s Condition parser treats as an operator, then execute commands through Jpom&#39;s script features.</p> https://db.gcve.eu/vuln/cve-2026-120201