CVE-2026-75933

Description

Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain.

CVSS Vector

References

• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-232-02.json
• https://www.cve.org/CVERecord?id=CVE-2026-75933
• https://www.jetadmin.io/