Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose password is derived deterministically from a single non-secret input - the SQL Server name (@@servername). The derivation algorithm is hard-coded in the client application and is identical across every installation; it contains a hard-coded secret key for entropy. Because the only input (the server name) is not secret - the instance suffix is hard-coded and the host name is discoverable via the SQL Server Browser service (UDP 1434), the TDS pre-login response, or DNS/NetBIOS - any party able to reach a Jumis SQL Server can compute the password offline and authenticate. The ##Tilde_JumisAdmin## login is a member of the sysadmin server role. Successful authentication therefore grants full administrative control of the SQL Server instance and read/write access to every customer's accounting database hosted on it. The on-premise server installation also programmatically enables xp_cmdshell during routine operation, so sysadmin access escalates to operating-system command execution on the database server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🆕 New CVE Jumis: authentication bypass in SQL Server admin login (CVE-2026-59105) Remote attackers can log in without credentials, then read or change every customer database and run OS commands. Patch → TJ7.0.141.36 https://cve.now/CVE-2026-59105?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical
@laacz Šis iespaidīgāks: https://cve.now/CVE-2026-59105?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical Tildes Jumi jebkurš var tagad supportēt :)
CVE-2026-59105 (CRITICAL / 9.8) — Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose password is... https://nvd.nist.gov/vuln/detail/CVE-2026-59105 #server #web
🆕 New CVE: CVE-2026-59105 (CVSS 9.8, Enclave score 7/10) Universal sysadmin credential vulnerability in Jumis Remote, no login needed. Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose… https://app.enclave.ai/threat-feed/CVE-2026-59105
CVE-2026-59105 · CRITICAL · CVSS 9.8 Jumis versions before TJ7.0.141.36 use a deterministically derived password for the Tilde_JumisAdmin SQL Server login, which can be computed offline by anyone able to reach the server. CVSS 3.1 · ENISA https://cve.new/CVE-2026-59105