CVE-2025-4636: Jct Airpointer

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user

Affected products

• Jct Airpointer: version 2.4.107-2 only

Published 2025-05-30. Last modified 2026-06-17.