CVE-2026-70432

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-70432
A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3823%20(2)
Configurations

No configuration.

History

23 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 y versiones anteriores permite a atacantes ejecutar código arbitrario en el contexto de la JVM del controlador de Jenkins.
Information

Published : 2026-08-05 18:17

Updated : 2026-10-24 16:10

NVD link : CVE-2026-70432

Mitre link : CVE-2026-70432

CVE.ORG link : CVE-2026-70432

JSON object : View

Products Affected

No product.

CWE
CWE-352

Cross-Site Request Forgery (CSRF)