Jenkins Multiple Vulnerabilities
Release Date: 29 Oct 2026
Multiple vulnerabilities were identified in Jenkins. A
remote attacker could exploit some of these vulnerabilities to trigger
cross-site scripting, elevation of privilege, security restriction bypass,
sensitive information disclosure, remote code execution and data manipulation
on the targeted system.
Impact
- Elevation
of Privilege
- Remote
Code Execution
- Security
Restriction Bypass
- Cross-Site
Scripting
- Data
Manipulation
- Information
Disclosure
System / Technologies affected
- Jenkins weekly 2.587
and earlier versions
- Jenkins
LTS 2.580.1 and earlier versions
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
- CVE-2026-117612
- CVE-2026-117613
- CVE-2026-117614
- CVE-2026-117615
- CVE-2026-117616
- CVE-2026-117617
- CVE-2026-117618
- CVE-2026-117619
- CVE-2026-117620
- CVE-2026-117621
- CVE-2026-117622
- CVE-2026-117623
- CVE-2026-117624
- CVE-2026-117625
- CVE-2026-117626
Source
Related Link
沒有留言:
發佈留言