Skip to content
JJexactyl
Products
| Product | CVEs | Exploited | Latest |
| Jexactyl | 3 | – | Oct 9, 2026 |
Exploited and recent CVEs
-
CVE-2026-107854
Medium 5.4
Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)
0.2%
-
CVE-2026-107852
High 7.1
Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery)
0.2%
-
CVE-2026-33061
Medium 5.8
Jexactyl has Stored DOM Cross-Site Scripting (XSS) via unescaped JSON in Blade template
0.2%