ZDI-CAN-27898 MEDIUM 5.0 Overdue Oct 29, 2025

JumpCloud

JumpCloud is a cloud-based directory and identity management platform used by organizations for user authentication and device management. This medium-severity vulnerability requires local access with low privileges and user interaction to exploit, but can cause significant availability impact and minor integrity compromise. Security teams should monitor for patches when the February 2026 deadline approaches and assess exposure among systems with local user access to JumpCloud components.

Advisory Details
Researcher Discovered by: Hillel Pinto
Reported October 29, 2025
Deadline February 26, 2026 49d overdue
CVSS Vector AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy