CVE-2026-70438: Jenkins Parameterized Remote Trigger Plugin vulnerability

Q: What is the severity of CVE-2026-70438?

CVE-2026-70438 has a risk rating of 26, indicating a critical vulnerability.

Q: How can I mitigate CVE-2026-70438?

Mitigation for CVE-2026-70438 involves updating the Jenkins Parameterized Remote Trigger Plugin to version 3.2.3 or later.

Q: What does CVE-2026-70438 exploit?

CVE-2026-70438 exploits a missing permission check that allows unauthorized users to enumerate credential IDs stored in Jenkins.

Q: Who is affected by CVE-2026-70438?

CVE-2026-70438 affects all users of Jenkins Parameterized Remote Trigger Plugin version 3.2.2 and earlier.

Q: What are the implications of CVE-2026-70438?

The implications of CVE-2026-70438 include potential exposure of sensitive credential IDs to unauthorized users.

Published Aug 5, 2026

Updated

A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected Software

1 affected component

Jenkins Parameterized Remote Trigger Plugin<=3.2.2

Event History

Aug 5, 2026

CVE Published

via MITRE·05:40 PM

Data Sourced

via MITRE·05:40 PM

Description

Frequently Asked Questions

What is the severity of CVE-2026-70438?

CVE-2026-70438 has a risk rating of 26, indicating a critical vulnerability.

How can I mitigate CVE-2026-70438?

Mitigation for CVE-2026-70438 involves updating the Jenkins Parameterized Remote Trigger Plugin to version 3.2.3 or later.

What does CVE-2026-70438 exploit?

CVE-2026-70438 exploits a missing permission check that allows unauthorized users to enumerate credential IDs stored in Jenkins.

Who is affected by CVE-2026-70438?

CVE-2026-70438 affects all users of Jenkins Parameterized Remote Trigger Plugin version 3.2.2 and earlier.

What are the implications of CVE-2026-70438?

The implications of CVE-2026-70438 include potential exposure of sensitive credential IDs to unauthorized users.

CVE-2026-70438: Jenkins Parameterized Remote Trigger Plugin vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-70438?

How can I mitigate CVE-2026-70438?

What does CVE-2026-70438 exploit?

Who is affected by CVE-2026-70438?

What are the implications of CVE-2026-70438?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-70438?

How can I mitigate CVE-2026-70438?

What does CVE-2026-70438 exploit?

Who is affected by CVE-2026-70438?

What are the implications of CVE-2026-70438?