CVE-2026-107852 | Jexactyl up to 4.0.4 Billing process amount_total/currency comparison

October 9, 2026 Yanac

A vulnerability identified as problematic has been detected in Jexactyl up to 4.0.4. The impacted element is an unknown function of the file /api/client/billing/stripe/process of the component Billing Module. This manipulation of the argument amount_total/currency causes incorrect comparison.

This vulnerability is registered as CVE-2026-107852. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More