Advisories · Technology

hekmon8 Jenkins-server-mcp.

Every CVE that names hekmon8 Jenkins-server-mcp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-10276 CVE record

CVSS 5.3 Medium

hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgery
- hekmon8 Jenkins-server-mcp
- Server-side request forgery (SSRF)
Not analysed yet 1 Jun 2026