CVE-2026-32294 — JetKVM insufficient firmware verification
JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the c…
Published: 2026-03-17 · CVSS: 7.0 · CVSS 4.0
JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding SHA256 hash to pass verification.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7