[ Vendor · 2 CVEs ]
JTL-Software GmbH
CVEs affecting JTL-Software GmbH published in the last 30 days, plus any JTL-Software GmbH CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-103905 | 14 Oct 2026 | CVSS 7.5 | JTL-Software GmbH JTL-ShopThe authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin logout route before checking… | |
| CVE-2026-103904 | 14 Oct 2026 | CVSS 9.3 | JTL-Software GmbH JTL-ShopThe public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating them against the configured… |