Advisories · Technology

Jenkins.

Every CVE that names Jenkins among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-117626 CVE record

CVSS 4.3 Medium

Path traversal in Jenkins
- Jenkins
- Path traversal
Not analysed yet 28 Oct 2026
CVE-2026-117625 CVE record

CVSS 4.3 Medium

Missing authorization in Jenkins
- Jenkins
- Broken access control
Not analysed yet 28 Oct 2026
CVE-2026-117624 CVE record

CVSS 8.8 High

Deserialization of untrusted data in Jenkins
- Jenkins
- Insecure deserialization
Not analysed yet 28 Oct 2026
CVE-2026-117623 CVE record

CVSS 5.4 Medium

Cross-site scripting in Jenkins
- Jenkins
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2026
CVE-2026-117622 CVE record

CVSS 6.1 Medium

Cross-site scripting in Jenkins
- Jenkins
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2026
CVE-2026-117621 CVE record

CVSS 6.1 Medium

Cross-site scripting in Jenkins
- Jenkins
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2026
CVE-2026-117620 CVE record

CVSS 8.8 High

Code injection in Jenkins
- Jenkins
- Code injection
Not analysed yet 28 Oct 2026
CVE-2026-117619 CVE record

CVSS 8.1 High

Session fixation in Jenkins
- Jenkins
- Authentication bypass
Not analysed yet 28 Oct 2026
CVE-2026-117618 CVE record

CVSS 8.1 High

Race condition in Jenkins
- Jenkins
- Race condition
Not analysed yet 28 Oct 2026
CVE-2026-117617 CVE record

CVSS 8.1 High

Symlink following in Jenkins
- Jenkins
- Path traversal
Not analysed yet 28 Oct 2026
CVE-2026-117616 CVE record

CVSS 8.8 High

Jenkins: Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads…
- Jenkins
Not analysed yet 28 Oct 2026
CVE-2026-117615 CVE record

CVSS 6.5 Medium

Symlink following in Jenkins
- Jenkins
- Path traversal
Not analysed yet 28 Oct 2026
CVE-2026-117614 CVE record

CVSS 8.8 High

Missing authorization in Jenkins
- Jenkins
- Broken access control
Not analysed yet 28 Oct 2026
CVE-2026-117613 CVE record

CVSS 5.4 Medium

Deserialization of untrusted data in Jenkins
- Jenkins
- Insecure deserialization
Not analysed yet 28 Oct 2026
CVE-2026-117612 CVE record

CVSS 8.8 High

Deserialization of untrusted data in Jenkins
- Jenkins
- Insecure deserialization
Not analysed yet 28 Oct 2026
CVE-2026-84657 CVE record

CVSS 4.2 Medium

Missing authorization in Jenkins
- Jenkins
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-84656 CVE record

CVSS 4.3 Medium

Missing authorization in Jenkins
- Jenkins
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-84655 CVE record

CVSS 4.3 Medium

Improper output encoding in Jenkins
- Jenkins
- CWE-116
Not analysed yet 2 Sept 2026
CVE-2026-84654 CVE record

CVSS 5.4 Medium

Jenkins: In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6…
- Jenkins
- CWE-472
Not analysed yet 2 Sept 2026
CVE-2026-84653 CVE record

CVSS 3.5 Low

Missing authorization in Jenkins
- Jenkins
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-84652 CVE record

CVSS 7.3 High

Session fixation in Jenkins
- Jenkins
- Authentication bypass
Not analysed yet 2 Sept 2026
CVE-2026-84651 CVE record

CVSS 6.3 Medium

Improper access control in Jenkins
- Jenkins
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-84650 CVE record

CVSS 8.8 High

Deserialization of untrusted data in Jenkins
- Jenkins
- Insecure deserialization
- CWE-566
Not analysed yet 2 Sept 2026
CVE-2026-84649 CVE record

CVSS 8.8 High

Cross-site request forgery in Jenkins
- Jenkins
- Cross-site request forgery (CSRF)
Not analysed yet 2 Sept 2026
CVE-2026-84648 CVE record

CVSS 8.8 High

Cross-site scripting in Jenkins
- Jenkins
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2026
CVE-2026-84647 CVE record

CVSS 8.8 High

Deserialization of untrusted data in Jenkins
- Jenkins
- Insecure deserialization
Not analysed yet 2 Sept 2026
CVE-2026-84646 CVE record

CVSS 4.3 Medium

Deserialization of untrusted data in Jenkins
- Jenkins
- Insecure deserialization
Not analysed yet 2 Sept 2026
CVE-2026-84645 CVE record

CVSS 8.8 High

Code injection in Jenkins
- Jenkins
- Code injection
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-70430 CVE record

CVSS 2.7 Low

Improper access control in Jenkins
- Jenkins
- Broken access control
Not analysed yet 5 Aug 2026
CVE-2026-70429 CVE record

CVSS 8.1 High

Jenkins: Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user…
- Jenkins
- CWE-178
Not analysed yet 5 Aug 2026
CVE-2026-70428 CVE record

CVSS 4.3 Medium

Path traversal in Jenkins
- Jenkins
- Path traversal
Not analysed yet 5 Aug 2026
CVE-2026-70427 CVE record

CVSS 4.3 Medium

Symlink following in Jenkins
- Jenkins
- Path traversal
Not analysed yet 5 Aug 2026
CVE-2026-70426 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Deserialization of untrusted data in Jenkins and others
- Jenkins
- Jenkins Project Remoting
- Insecure deserialization
Not analysed yet 5 Aug 2026