Jrohy Trojan — known CVE vulnerabilities

Every CVE whose affected-product data names Jrohy Trojan, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-55215 — CVSS 9.8 (critical): An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register.
• CVE-2025-5525 — CVSS 5.6 (medium): A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan…