Critical: Jumis local server vulnerability

Important: Jumis cloud service customers are not affected by this vulnerability. It also does not affect local server installations that have the relevant Jumis security update fully installed. Furthermore, it does not affect any of our other solutions - Jumis Finance, Jumis People, Jumis My Assistant, and Jumis Envoice.

Upon receiving information about the vulnerability, we acted promptly in cooperation with cert.lv and we delivered the security patch as early as the summer of 2026 with the Jumis 2026 July release before the vulnerability was made public. If you are using a local Jumis server and the update has not yet been installed, we urge you to do so immediately.

Who is affected?
According to the published CVE record, the vulnerability applies to versions of Jumis older than TJ7.0.141.36 (Jumis 2026 July release).

The risk is associated with unupdated local server installations where unauthorized persons can access the database server. Particular attention should be paid to servers whose firewall settings allow public access from the internet.

Even if the server is only accessible within the company's internal network, an older version of Jumis must be updated. A firewall helps restrict access but does not replace a security patch.

What should you do?

• If you use the Jumis cloud service, no additional actions are required regarding this vulnerability.
• If you use Jumis on a local server, check your version and ensure that the security update is fully installed on the server as well. Instructions on how to check your installed Jumis version are available here.
• If the update has not yet been installedPlease install the latest version of Jumis immediately. Also, ask your IT specialist to check firewall settings and ensure that only necessary, trusted connections can access the database server.

If you are unsure about the solution, version, or update procedure you are using, please contact the Jumis customer support team atbalsts@mansjumis.lv. 

Everyday security
As of November 6, 2026 we have not detected any security breaches related to this vulnerability. According to the information available to us, no complete, ready-to-use exploit code for this vulnerability has been made public. However, this is no reason to delay installing the update.

Your data security is our top priority. No software provider can guarantee that vulnerabilities will never occur. That is why we work daily to improve the security of our solutions and promptly resolve identified issues to protect your data.

Thank you for updating Jumis in a timely manner and for working with us to ensure the security of your data!