Critical Security Update for jmc: Addressing Vulnerabilities CVE-2025-66566 and CVE-2026-2332
Summary
RHSA-2026:20568: Red Hat Security Advisory: jmc security update. Affects jmc versions < 0:8.2.0-19.el9_8.2. Fixed in 0:8.2.0-19.el9_8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
jmc (Java Mission Control) is a powerful tool suite for monitoring and managing Java applications. It provides features for profiling, diagnostics, and performance analysis, making it essential for developers and system administrators. However, recent vulnerabilities have been identified that could potentially compromise the security of systems utilizing this package.
Vulnerability Detail
The vulnerabilities identified as CVE-2025-66566 and CVE-2026-2332 expose jmc to security risks that could allow unauthorized access to sensitive information. These vulnerabilities stem from improper handling of certain inputs, which could lead to information disclosure. If exploited, attackers could gain access to critical data, impacting the confidentiality of the system. The CVSS score for this vulnerability is 7.5, indicating a high severity level.
How To Fix
Minimum fixed version
0:8.2.0-19.el9_8.2
This is the first release that contains the fix.
sudo dnf update jmcTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to the jmc tool or implementing network security measures to limit exposure until the update can be applied.
Conclusion
In summary, the jmc package has critical vulnerabilities that need to be addressed promptly. Updating to the latest patched version is essential to maintain the security of your systems. Utilize tools like Vulert to monitor and manage vulnerabilities effectively.
See every vulnerability recorded for jmc →
FAQ
These are identifiers for specific vulnerabilities found in the jmc package that could lead to unauthorized access to sensitive information.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The CVSS score for this vulnerability is 7.5, indicating a high level of severity.
Consider implementing network security measures to limit exposure or restricting access to the jmc tool until you can apply the update.
You can find more details in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:20568.json.
Related vulnerabilities
Recent vulnerabilities recorded for jmc.
