Executive brief
Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation
Affected products
- Maven org.jenkins-ci.main:jenkins-core
Junglewise Threat Intelligence
CVE-2026-33002: Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation
CVE-2026-33002 · Severity: low · CVSS 3.1 · Published 2026-03-18
Technologies: org.jenkins-ci.main:jenkins-core (Maven). Vendors: Maven.