Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins project jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting...CVE-2026-1176264.3 Medium
- jenkins project jenkinsA missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers...CVE-2026-1176254.3 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction...CVE-2026-1176248.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips...CVE-2026-1176235.4 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing...CVE-2026-1176226.1 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link...CVE-2026-1176216.1 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission...CVE-2026-1176208.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic...CVE-2026-1176198.1 High
- jenkinsIn Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first...CVE-2026-1176188.1 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an...CVE-2026-1176178.1 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by...CVE-2026-1176168.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the...CVE-2026-1176156.5 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent...CVE-2026-1176148.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections...CVE-2026-1176135.4 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to...CVE-2026-1176128.8 High
- jenkins project keycloak authentication pluginJenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after...CVE-2026-921414.3 Medium
- jenkins project gitee pluginJenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee...CVE-2026-921406.8 Medium
- jenkins project bitbucket push and pull request pluginJenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the...CVE-2026-921396.5 Medium
- jenkins project bitbucket server integration pluginThe OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier...CVE-2026-921384.2 Medium
- jenkins project robot framework pluginJenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory...CVE-2026-921378.8 High
- jenkins project owasp dependency-check pluginJenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from...CVE-2026-921368.0 High
- jenkins project coverage pluginJenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results...CVE-2026-921358.0 High
- jenkins project warnings pluginJenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis...CVE-2026-921348.0 High
- jenkins project gitlab pluginJenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for...CVE-2026-921335.4 Medium
- jenkins project gradle pluginJenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the...CVE-2026-921325.4 Medium
- jenkins project pipeline: groovy libraries pluginJenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the...CVE-2026-921314.2 Medium
- jenkins project pipeline: multibranch pluginJenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate...CVE-2026-921303.1 Low
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from...CVE-2026-921297.5 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified...CVE-2026-921287.5 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the...CVE-2026-921278.0 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder...CVE-2026-921268.5 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the ...CVE-2026-921258.8 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy...CVE-2026-921248.8 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations...CVE-2026-921238.8 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called...CVE-2026-921228.8 High
- jenkins project update-center2Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names,...CVE-2026-846775.4 Medium
- jenkins project parameterized remote trigger pluginJenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job...CVE-2026-846764.3 Medium
- jenkins project tics pluginOS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers...CVE-2026-846757.4 High
- jenkins project xebialabs xl deploy pluginMissing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow...CVE-2026-846745.4 Medium
- jenkins project customizable header pluginJenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin...CVE-2026-846738.8 High
- jenkins project microsoft entra id (previously azure ad) pluginJenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants...CVE-2026-846728.8 High
- jenkins project file parameter pluginJenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary...CVE-2026-846718.8 High
- jenkins project performance pluginJenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that...CVE-2026-846708.8 High
- jenkins project allure pluginA path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with...CVE-2026-846698.8 High
- jenkins project saml pluginJenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity...CVE-2026-846688.8 High
- jenkins project thinbackup pluginJenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration...CVE-2026-846677.1 High
- jenkins project job configuration history pluginJenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the...CVE-2026-846665.4 Medium
- jenkins project sonarqube scanner pluginJenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard...CVE-2026-846658.0 High
- jenkins project gitlab pluginJenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection...CVE-2026-846645.4 Medium
- jenkins project pipeline: groovy libraries pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin...CVE-2026-846635.4 Medium
- Show moreLoading…