Jexactyl

Products

ProductCVEsExploitedLatest
Jexactyl3–Oct 9, 2026

Exploited and recent CVEs

  • CVE-2026-107854 Medium 5.4 Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check) 0.2%
  • CVE-2026-107852 High 7.1 Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery) 0.2%
  • CVE-2026-33061 Medium 5.8 Jexactyl has Stored DOM Cross-Site Scripting (XSS) via unescaped JSON in Blade template 0.2%