VendorsJmpsecosctrlany version
Vulnerabilities

Jmpsec JMP Security osctrl any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-28280
`osctrl-admin` has Stored Cross-Site Scripting (XSS) in On-Demand Query List
Published 2026-02-26 · Analyzed
8.7EPSS 0.004
CVE-2026-28279
`osctrl-admin` Vulnerable to OS Command Injection via Environment Configuration
Published 2026-02-26 · Analyzed
8.4EPSS 0.013