Jenkins

    Dashboard / Vendors

    Products: 696
    Vulnerabilities: 1823
    Known Exploited: 6
    79
    Critical Level Threats
    499
    High Level Threats
    1208
    Medium Level Threats
    35
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-117626

    Path Traversal in Jenkins File Browser Enables Information Disclosure

    Last Modified: Oct 28, 2026
    Published: Oct 28, 2026

    CVE-2026-117625

    Missing Permission Check Exposes Jenkins Proxy Configuration

    Last Modified: Oct 28, 2026
    Published: Oct 28, 2026

    CVE-2026-117624

    Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked as storing their configuration in independent top-level configuration files as nested values, allowing attackers to bypass the root element check and potentially inject nested objects.

    Last Modified: Nov 02, 2026
    Published: Oct 28, 2026

    CVE-2026-117623

    Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission.

    Last Modified: Nov 02, 2026
    Published: Oct 28, 2026

    CVE-2026-117622

    Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes.

    Last Modified: Nov 02, 2026
    Published: Oct 28, 2026
    Items Per Page