security / advisories / index

Security Advisories

Official security notices for JADAPTIVE products.

This page provides information about confirmed security vulnerabilities, including affected products, potential impact and available corrections.

Customers should consult the relevant advisory and ensure their applications use an appropriate fixed release.

Published Advisories

JADAPTIVE-SA-2026-002

Mount Path Canonicalization Bypass in Virtual File System

Advisory date: 1 October 2026
Status: Fixed releases available
Affected products: Maverick Synergy Server, Maverick Legacy Server

Incomplete normalization of virtual filesystem paths could allow operations to be routed through a less restrictive parent mount rather than the intended child mount in certain overlapping mount configurations.

The issue has been corrected in maintained Maverick server releases.

Read Advisory

JADAPTIVE-SA-2026-001

Cross-User Public Key Authentication Bypass

Advisory date: 1 October 2026
Status: Fixed releases available
Affected products: Maverick Synergy Server, Maverick Legacy Server

Public key authorization state could be reused across a change of username during SSH authentication, potentially allowing authentication as another account without a public key specifically authorised for that account.

The issue has been corrected in maintained Maverick server releases.

Read Advisory

Using These Advisories

Each advisory identifies the affected products, describes the security impact and provides details of corrected releases.

Because Maverick server products are integrated into customer applications, the exposure and consequences of a vulnerability may depend on the application's configuration and security model.

Customers requiring assistance should contact JADAPTIVE Support and reference the relevant advisory identifier.

Security & Vulnerability Disclosure