Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins — Jenkins Security Advisory 2026-02-18 Clear all filters
TI-2026-21559 CVE-2026-27100 · GHSA-wfhp-qgm8-5p5c

Information disclosure in Jenkins

Priority LOW 20

Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0037 Published 2026-02-18 Partial fix · 2.551, 2.541.2 CWE-200
TI-2026-21558 CVE-2026-27099 · GHSA-85h6-5m3v-gx37

Cross-site scripting in Jenkins

Priority LOW 37

Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-provided description of the "Mark temporarily offline" offline cause, resulting in a stored cross-site s…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00481 Published 2026-02-18 Partial fix · 2.551, 2.541.2 CWE-79