CVE-2026-70448: Jenkins-ivy-report-plugin vulnerability

Q: What is the severity of CVE-2026-70448?

CVE-2026-70448 has a risk score of 33, indicating a moderate level of severity.

Q: How do I fix CVE-2026-70448?

To mitigate CVE-2026-70448, upgrade the Jenkins Ivy Report Plugin to version 1.3 or later.

Q: What type of vulnerability is CVE-2026-70448?

CVE-2026-70448 is classified as an XML External Entity (XXE) attack vulnerability.

Q: Which software is affected by CVE-2026-70448?

The affected software for CVE-2026-70448 is the Jenkins Ivy Report Plugin, specifically versions 1.2 and earlier.

Q: What consequence might an exploit of CVE-2026-70448 have?

Exploiting CVE-2026-70448 could allow an attacker to gain unauthorized access to sensitive data by processing malicious Ivy report files.

Published Aug 5, 2026

Updated

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files.

Affected Software

1 affected component

jenkins-ivy-report-plugin<=1.2

Event History

Aug 5, 2026

CVE Published

via MITRE·05:40 PM

Data Sourced

via MITRE·05:40 PM

Description

Frequently Asked Questions

What is the severity of CVE-2026-70448?

CVE-2026-70448 has a risk score of 33, indicating a moderate level of severity.

How do I fix CVE-2026-70448?

To mitigate CVE-2026-70448, upgrade the Jenkins Ivy Report Plugin to version 1.3 or later.

What type of vulnerability is CVE-2026-70448?

CVE-2026-70448 is classified as an XML External Entity (XXE) attack vulnerability.

Which software is affected by CVE-2026-70448?

The affected software for CVE-2026-70448 is the Jenkins Ivy Report Plugin, specifically versions 1.2 and earlier.

What consequence might an exploit of CVE-2026-70448 have?

Exploiting CVE-2026-70448 could allow an attacker to gain unauthorized access to sensitive data by processing malicious Ivy report files.

CVE-2026-70448: Jenkins-ivy-report-plugin vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-70448?

How do I fix CVE-2026-70448?

What type of vulnerability is CVE-2026-70448?

Which software is affected by CVE-2026-70448?

What consequence might an exploit of CVE-2026-70448 have?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-70448?

How do I fix CVE-2026-70448?

What type of vulnerability is CVE-2026-70448?

Which software is affected by CVE-2026-70448?

What consequence might an exploit of CVE-2026-70448 have?