CVE-2023-31826: Skyscreamer Nevado Jms

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.

Affected products

• Skyscreamer Nevado Jms: version 1.3.2 only

Published 2023-05-23. Last modified 2026-06-17.