Total
290 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-53437 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 4.3 MEDIUM |
| Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks. | |||||
| CVE-2026-53436 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 4.3 MEDIUM |
| Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks. | |||||
| CVE-2026-53438 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 4.3 MEDIUM |
| A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view. | |||||
| CVE-2026-53435 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 8.8 HIGH |
| In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled `config.xml` submission in a way that allows them to handle HTTP requests afterwards. This can be used to impersonate any user and send HTTP requests on their behalf, up to and including use of the Script Console to run arbitrary code, or to read arbitrary files from the Jenkins controller. | |||||
| CVE-2026-53442 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 5.3 MEDIUM |
| Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system. | |||||
| CVE-2026-53440 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 4.3 MEDIUM |
| Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain. | |||||
| CVE-2026-53441 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 5.4 MEDIUM |
| Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission. | |||||
| CVE-2026-53439 | 1 Jenkins | 1 Jenkins | 2026-10-26 | N/A | 4.3 MEDIUM |
| Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to enumerate view names of other users' "My Views". | |||||
| CVE-2026-70430 | 1 Jenkins | 1 Jenkins | 2026-10-24 | N/A | 2.7 LOW |
| Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those intended for configuration only by administrators. | |||||
| CVE-2026-70429 | 1 Jenkins | 1 Jenkins | 2026-10-24 | N/A | 6.5 MEDIUM |
| Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackers able to create new users or groups with names that case-insensitively match other characters to impersonate other users or be granted their permissions in some circumstances. | |||||
| CVE-2025-67639 | 1 Jenkins | 1 Jenkins | 2026-10-14 | N/A | 3.5 LOW |
| A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account. | |||||
| CVE-2025-67637 | 1 Jenkins | 1 Jenkins | 2026-10-14 | N/A | 4.3 MEDIUM |
| Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. | |||||
| CVE-2025-67635 | 1 Jenkins | 1 Jenkins | 2026-10-14 | N/A | 7.5 HIGH |
| Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service. | |||||
| CVE-2025-67636 | 1 Jenkins | 1 Jenkins | 2026-10-14 | N/A | 4.3 MEDIUM |
| A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views. | |||||
| CVE-2025-67638 | 1 Jenkins | 1 Jenkins | 2026-10-14 | N/A | 4.3 MEDIUM |
| Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them. | |||||
| CVE-2026-84653 | 1 Jenkins | 1 Jenkins | 2026-09-15 | N/A | 3.5 LOW |
| Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in the Appearance configuration page, allowing attackers with Overall/Manage permission to modify Appearance configuration options they should not have access to. | |||||
| CVE-2026-84655 | 1 Jenkins | 1 Jenkins | 2026-09-15 | N/A | 4.3 MEDIUM |
| Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API, allowing attackers able to control map property names to inject arbitrary fields into JSON and Python API responses. | |||||
| CVE-2026-84656 | 1 Jenkins | 1 Jenkins | 2026-09-15 | N/A | 4.3 MEDIUM |
| A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to. | |||||
| CVE-2026-84657 | 1 Jenkins | 1 Jenkins | 2026-09-15 | N/A | 4.2 MEDIUM |
| In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users. | |||||
| CVE-2026-84651 | 1 Jenkins | 1 Jenkins | 2026-09-11 | N/A | 6.3 MEDIUM |
| In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure permission on one agent to take over a different agent, gaining control of its configuration and obtaining access to its inbound agent secret and environment variables. | |||||