CVE-2026-32294: Jetkvm Kvm

Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.

JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.

Affected products

• Jetkvm Kvm: up to and including 0.5.3

Published 2026-03-17. Last modified 2026-06-17.