CyferShepard Jellystat

• CVE-2026-41167 Critical 9.1 Jellystat has SQL Injection that leads to to Remote Code Execution 0.6%
• CVE-2025-24960 High 8.7 Missing Input validation for filename in backups endpoint in Jellystat 0.5%