Today we are releasing a maintenance version of Jamf Pro; highlights include:
Changes and Improvements
Jamf Pro 11.33.1 includes Tomcat 10.1.60.
Resolved Issues
Jamf Pro Server: Security Issues
Jamf provides the CVE-ID for security issues with high or critical severity when possible.
- [PI209200] Fixed: A known vulnerability in a third-party library (CVE-2026-41715).
- [PI214500] Fixed: A cross-site scripting (XSS) issue.
- [PI228082] Fixed: A broken access control issue.
- [PI230883] Fixed: A known vulnerability in a third-party library (CVE-2026-84939).
- [PI209383] Fixed: A known vulnerability in a third-party library (CVE-2018-14040, CVE-2018-14041, CVE-2018-14042, CVE-2016-10735).
- [PI232915] Fixed: A known vulnerability in a third-party library (CVE-2026-97687).
- [PI232918] Fixed: A known vulnerability in a third-party library (CVE-2026-101896).
- [PI232922] Fixed: A known vulnerability in a third-party library (CVE-2026-91777).
Jamf Pro Server
- [PI-1577] Fixed: Inventory submissions may cause high database load when smart computer groups or advanced computer searches use patch reporting criteria.
- [PI-1610] Fixed: The mobileDeviceEnrolled event may fail to generate a webhook when Apple TV devices are enrolled
- [PI-1613] Fixed: Adding devices to the scope of an in-house app with a manually edited version may cause the app to reinstall on devices that already have it.
- [PI-1723] Fixed: On new installations, Jamf Pro may bypass the configured HTTP proxy and log errors when connecting to external services until Jamf Pro is restarted.
- [PI-1961] Fixed: Renewing the MDM profile on Apple TV devices may return an HTTP 401 error.
- [PI-1962] Fixed: Configuration profiles with Entrust SCEP dynamic challenges fail to deploy, and repeated "Error obtaining SCEP challenge from Entrust" messages appear in the logs.
- [PI-1967] Fixed: Jamf Pro cannot create or renew the built-in certificate authority (CA) or its related certificates if the organization name is longer than 29 characters.
For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.
To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.
Cloud Upgrade Schedule
Your Jamf Pro server, including any free sandbox environments, will be updated based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf Cloud instance.
To upgrade manually: Log in to Jamf Account, click View details on the Jamf Pro tile, and then click Upgrade on the appropriate instance. Note: This capability is not available for GovCloud environments and is disabled for all instances one day prior to when the scheduled standard upgrades begin.
Subscribe to product alerts to receive real-time updates.
| Hosted Region | Begins | Ends |
| ap-southeast-2 | 23 October at 1300 UTC | 23 October at 1900 UTC |
| ap-northeast-1 | 23 October at 1500 UTC | 23 October at 2300 UTC |
| eu-central-1 | 23 October at 2200 UTC | 24 October at 0900 UTC |
| germanywestcentral Azure | 23 October at 2200 UTC | 24 October at 0000 UTC |
| eu-west-2 | 23 October at 2300 UTC | 24 October at 0600 UTC |
| us-east-1 StateRAMP | 24 October at 0400 UTC | 24 October at 0600 UTC |
| us-east-2 High Compliance | 24 October at 0400 UTC | 24 October at 0600 UTC |
| us-east-2 | 24 October at 0400 UTC | 24 October at 1300 UTC |
| central-us Azure | 24 October at 0500 UTC | 24 October at 0700 UTC |
| us-west-2 | 24 October at 0700 UTC | 24 October at 1800 UTC |
