Known Vulnerabilities for Credentials by Jenkins
Listed below are 3 of the newest known vulnerabilities associated with "Credentials" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-68562 json | A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp repor... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-68503 json | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default ... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-67596 json | CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated att... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-67436 json | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.... | Not Provided | 2026-07-29 | 2026-07-30 |
| CVE-2026-67349 json | OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELM_VALUES environment v... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-67346 json | Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url funct... | Not Provided | 2026-07-30 | 2026-07-30 |
| CVE-2026-67339 json | guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL han... | Not Provided | 2026-08-01 | 2026-08-01 |
| CVE-2026-67337 json | better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enable... | Not Provided | 2026-08-01 | 2026-08-01 |
| CVE-2026-67314 json | axios versions >=1.15.2 and <1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/adapte... | Not Provided | 2026-08-01 | 2026-08-01 |
| CVE-2026-67308 json | Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arb... | Not Provided | 2026-08-01 | 2026-08-02 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jenkins | Credentials | 2.1.9 | |||
| Application | Jenkins | Credentials | 2.1.8 | |||
| Application | Jenkins | Credentials | 2.1.7 | |||
| Application | Jenkins | Credentials | 2.1.6 | |||
| Application | Jenkins | Credentials | 2.1.5 | |||
| Application | Jenkins | Credentials | 2.1.4 | |||
| Application | Jenkins | Credentials | 2.1.3 | |||
| Application | Jenkins | Credentials | 2.1.2 | |||
| Application | Jenkins | Credentials | 2.1.19 | |||
| Application | Jenkins | Credentials | 2.1.18 | |||
| Application | Jenkins | Credentials | 2.1.17 | |||
| Application | Jenkins | Credentials | 2.1.16 | |||
| Application | Jenkins | Credentials | 2.1.15 | |||
| Application | Jenkins | Credentials | 2.1.14 | |||
| Application | Jenkins | Credentials | 2.1.13 | |||
| Application | Jenkins | Credentials | 2.1.12 | |||
| Application | Jenkins | Credentials | 2.1.11 | |||
| Application | Jenkins | Credentials | 2.1.10 | |||
| Application | Jenkins | Credentials | 2.1.1 | |||
| Application | Jenkins | Credentials | 2.1.0 |