Known Vulnerabilities for products from Jenkins
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Jenkins".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-117626 json | Not Provided | 2026-10-28 | 2026-11-05 | |
| CVE-2026-117625 json | Not Provided | 2026-10-28 | 2026-11-05 | |
| CVE-2026-117624 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of ... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117623 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow ... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117622 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse int... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117621 json | Not Provided | 2026-10-28 | 2026-11-05 | |
| CVE-2026-117620 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117619 json | Not Provided | 2026-10-28 | 2026-11-05 | |
| CVE-2026-117618 json | In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check w... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117617 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before cre... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117616 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the... | Not Provided | 2026-10-28 | 2026-11-09 |
| CVE-2026-117615 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117614 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers ... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117613 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowin... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-117612 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `re... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-92129 json | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added... | Not Provided | 2026-09-16 | 2026-09-21 |
| CVE-2026-92128 json | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the ... | Not Provided | 2026-09-16 | 2026-09-21 |
| CVE-2026-92127 json | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item conf... | Not Provided | 2026-09-16 | 2026-09-21 |
| CVE-2026-92126 json | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy m... | Not Provided | 2026-09-16 | 2026-09-27 |
| CVE-2026-92125 json | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation... | Not Provided | 2026-09-16 | 2026-09-21 |
Known software with vulnerabilities from Jenkins
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Jenkins | 360 Fireline | 1.0 |
| Application | Jenkins | Absint Astree | 1.0.0 |
| Application | Jenkins | Active Choices | 0.1 |
| Application | Jenkins | Active Directory | 1.0 |
| Application | Jenkins | Alauda Devops Pipeline | 2.3.2 |
| Application | Jenkins | Alauda Kubernetes Support | 2.0.0 |
| Application | Jenkins | Amazon Ec2 | 1.0 |
| Application | Jenkins | Amazon Sns Build Notifier | - |
| Application | Jenkins | Amazon Web Services Serverless Application Model | 1.2.2 |
| Application | Jenkins | Amazon Web Services Service Application Model | 1.2.2 |
| Application | Jenkins | Anchore Container Image Scanner | 1.0.0 |
| Application | Jenkins | Android Lint | 1.0 |
| Application | Jenkins | Ansible | 0.1 |
| Application | Jenkins | Ansible Tower | 0.5.0 |
| Application | Jenkins | Appdynamics | 1.0.0 |
| Application | Jenkins | Applatix | - |
| Application | Jenkins | Appspider | 1.0.12 |
| Application | Jenkins | Aqua Microscanner | 1.0.0 |
| Application | Jenkins | Aqua Security Scanner | - |
| Application | Jenkins | Aqua Security Severless Scanner | 1.0.0 |