CVE-2026-48927: XSS
Published May 27, 2026
·Updated
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
Affected Software
2 affected components
Jenkins buildgraph-view Plugin<=1.8
Jenkins Buildgraph-view Jenkins<=1.8
Event History
May 27, 2026
CVE Published
via MITRE·02:13 PM
Data Sourced
via MITRE·02:13 PM
Description
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-48927?
CVE-2026-48927 has a medium severity rating of 5.5 according to the CVSS 3.1 scoring.
2
What type of vulnerability is CVE-2026-48927?
CVE-2026-48927 is a stored cross-site scripting (XSS) vulnerability.
3
How can CVE-2026-48927 be exploited?
CVE-2026-48927 can be exploited by attackers who can configure jobs or views in Jenkins buildgraph-view Plugin.
4
How do I fix CVE-2026-48927?
To fix CVE-2026-48927, upgrade to Jenkins buildgraph-view Plugin version 1.9 or later.
5
What software is affected by CVE-2026-48927?
CVE-2026-48927 affects Jenkins buildgraph-view Plugin version 1.8 and earlier.