Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how jenkins compares to other vendors in security performance

View Risk Score →

Software

jenkins
277
jenkins lts
225
jenkins jenkins
107
jenkins pipeline
30
jenkins jenkins lts
22
jenkins script security
18
jenkins script security jenkins
14
jenkins pipeline\
10
jenkins kubernetes ci
9
jenkins build failure analyzer plugin
8
jenkins config file provider
8
jenkins configuration as code
8
jenkins email extension template
8
jenkins active directory
7
jenkins openid
7
jenkins repository connector
7
jenkins script security plugin
7
jenkins azure vm agents
6
jenkins bitbucket oauth
6
jenkins deployment dashboard plugin
6
jenkins active choices
5
jenkins active directory jenkins
5
jenkins cadence vmanager plugin
5
jenkins code dx
5
jenkins credentials binding
5
jenkins electricflow
5
jenkins active directory plugin
4
jenkins assembla jenkins
4
jenkins aws codecommit trigger
4
jenkins azure ad
4
jenkins compuware topaz for total test jenkins
4
jenkins cons3rt jenkins
4
jenkins continuous integration with toad edge
4
jenkins convertigo mobile platform
4
jenkins delphix
4
jenkins dingding-notifications
4
jenkins extended choice parameter
4
jenkins git jenkins
4
jenkins icescrum
4
jenkins ns-nd integration performance publisher jenkins
4
jenkins openid connect authentication plugin
4
jenkins pipeline maven integration
4
jenkins promoted builds
4
jenkins relution enterprise appstore publisher
4
jenkins saml single sign on jenkins
4
jenkins subversion
4
jenkins appspider jenkins
3
jenkins audit to database
3
jenkins autocomplete parameter
3
jenkins azure credentials
3

Jenkins JenkinsJenkins - FilePath.untarFrom() Symlink Target Validation Bypass and Blank-Name Check Bypass (Arbitrary File Read)

Risk 42
Severity
8.8
First published (updated )
CVE-2026-19429

Jenkins AWS CodeBuild PluginMissing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Over…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70447

Jenkins Sauce OnDemand PluginMissing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Ov…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70445

Jenkins CodeSonar PluginMissing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70446

Jenkins Violation Comments to GitLab PluginA missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows …

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70444
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Google Chat Notification PluginJenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate …

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70442

Jenkins Jenkins Summary Display PluginXSS

Risk 35
Severity
5.4
First published (updated )
CVE-2026-70441

Jenkins XML Job to Job DSL PluginJenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing at…

Risk 41
Severity
6.5
First published (updated )
CVE-2026-70439

Jenkins Parameterized Remote Trigger PluginA missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows a…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70438

Jenkins Jenkins Webhook Secret Credentials Provider PluginJenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a cons…

Risk 21
Severity
3.7
First published (updated )
CVE-2026-70437
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins SCM-Manager PluginA missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Ov…

Risk 30
Severity
4.2
First published (updated )
CVE-2026-70435

Jenkins External Workspace Manager PluginJenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70436

Jenkins SCM-Manager PluginCSRF

Risk 30
Severity
4.2
First published (updated )
CVE-2026-70434

Jenkins Jenkins HCL AppScan PluginMissing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overa…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70433

Jenkins Jenkins Multijob PluginCode Injection

Risk 82
Severity
8.8
First published (updated )
CVE-2026-70431
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and grou…

Risk 78
Severity
8.1
First published (updated )
CVE-2026-70429

Jenkins JenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can b…

Risk 16
Severity
2.7
First published (updated )
CVE-2026-70430

Jenkins JenkinsPath Traversal

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70428

Jenkins JenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effect…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-70427

oss-secMultiple vulnerabilities in Jenkins and Jenkins plugins

First published (updated )
https://seclists.org/oss-sec/2026/q3/438
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Script Security PluginJenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformat…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2492200

Jenkins Zowe zDevOps PluginA missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allow…

Risk 30
Severity
4.2
First published (updated )
CVE-2026-57307

Zowe Zowe zDevOps PluginCSRF

Risk 30
Severity
4.2
First published (updated )
CVE-2026-57306

Jenkins Assembla PluginA missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/…

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57304

Jenkins Jenkins Assembla PluginCSRF

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57305
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

jenkins/assembla-pluginSSRF

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57303

Jenkins FitNesse PluginJenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57302

Jenkins OWASP ZAP PluginJenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rathe…

Risk 82
Severity
8.8
First published (updated )
CVE-2026-57301

Jenkins MCP Server PluginA missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows atta…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57300

Contrast Security Jenkins Contrast Continuous Application Security PluginMissing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlie…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57299
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203