{"schema_version":1,"title":"Jenkins vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 24 vulnerabilities in Jenkins: 0 in the last 7 days and 13 in the last 90 days, 5 of them critical and 4 exploited in the wild. The most recent, CVE-2026-84657, was published on 2 September 2026.","url":"https://junglewise.ai/threats/technologies/jenkins","json_url":"https://junglewise.ai/threats/technologies/jenkins.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/jenkins","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":7,"all_time":24,"critical":5,"exploited":4,"last_7_days":0,"last_30_days":13,"last_90_days":13,"last_365_days":19},"latest":[{"cve":"CVE-2026-84657","cvss":4.2,"epss":0.0025,"slug":"cve-2026-84657-jenkins-build-cli-command-authorization-bypass-via-s-flag","title":"Jenkins build CLI command authorization bypass via -s flag","severity":"medium","exploited":false,"published_at":"2026-09-02T16:17:30.373+00:00","url":"https://junglewise.ai/threats/cve-2026-84657-jenkins-build-cli-command-authorization-bypass-via-s-flag"},{"cve":"CVE-2026-84656","cvss":4.3,"epss":0.003,"slug":"cve-2026-84656-jenkins-missing-permission-check-on-build-parameters","title":"Jenkins missing permission check on build parameters","severity":"medium","exploited":false,"published_at":"2026-09-02T16:17:30.273+00:00","url":"https://junglewise.ai/threats/cve-2026-84656-jenkins-missing-permission-check-on-build-parameters"},{"cve":"CVE-2026-84655","cvss":4.3,"epss":0.0031,"slug":"cve-2026-84655-jenkins-rest-api-json-key-injection","title":"Jenkins REST API JSON key injection","severity":"medium","exploited":false,"published_at":"2026-09-02T16:17:30.177+00:00","url":"https://junglewise.ai/threats/cve-2026-84655-jenkins-rest-api-json-key-injection"},{"cve":"CVE-2026-84654","cvss":5.4,"epss":0.0025,"slug":"cve-2026-84654-stapler-form-data-binding-allows-setting-public-static-fields-in","title":"Stapler form data binding allows setting public static fields in Jenkins","severity":"medium","exploited":false,"published_at":"2026-09-02T16:17:30.08+00:00","url":"https://junglewise.ai/threats/cve-2026-84654-stapler-form-data-binding-allows-setting-public-static-fields-in"},{"cve":"CVE-2026-84653","cvss":3.5,"epss":0.0034,"slug":"cve-2026-84653-jenkins-appearance-configuration-permission-bypass","title":"Jenkins Appearance configuration permission bypass","severity":"low","exploited":false,"published_at":"2026-09-02T16:17:29.983+00:00","url":"https://junglewise.ai/threats/cve-2026-84653-jenkins-appearance-configuration-permission-bypass"},{"cve":"CVE-2026-84652","cvss":7.3,"epss":0.0044,"slug":"cve-2026-84652-jenkins-session-fixation-via-remember-me-cookie","title":"Jenkins session fixation via remember me cookie","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.893+00:00","url":"https://junglewise.ai/threats/cve-2026-84652-jenkins-session-fixation-via-remember-me-cookie"},{"cve":"CVE-2026-84651","cvss":6.3,"epss":0.0031,"slug":"cve-2026-84651-jenkins-agent-configuration-privilege-escalation","title":"Jenkins agent configuration privilege escalation","severity":"medium","exploited":false,"published_at":"2026-09-02T16:17:29.803+00:00","url":"https://junglewise.ai/threats/cve-2026-84651-jenkins-agent-configuration-privilege-escalation"},{"cve":"CVE-2026-84650","cvss":8.8,"epss":0.0047,"slug":"cve-2026-84650-jenkins-transient-field-deserialization-bypass","title":"Jenkins transient field deserialization bypass","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.713+00:00","url":"https://junglewise.ai/threats/cve-2026-84650-jenkins-transient-field-deserialization-bypass"},{"cve":"CVE-2026-84649","cvss":8.8,"epss":0.002,"slug":"cve-2026-84649-stapler-csrf-token-exposure-in-dynamically-generated-javascript","title":"Stapler CSRF token exposure in dynamically generated JavaScript","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.62+00:00","url":"https://junglewise.ai/threats/cve-2026-84649-stapler-csrf-token-exposure-in-dynamically-generated-javascript"},{"cve":"CVE-2026-84648","cvss":8.8,"epss":0.0058,"slug":"cve-2026-84648-jenkins-system-log-viewer-stored-xss-in-metadata","title":"Jenkins system log viewer stored XSS in metadata","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.527+00:00","url":"https://junglewise.ai/threats/cve-2026-84648-jenkins-system-log-viewer-stored-xss-in-metadata"},{"cve":"CVE-2026-84647","cvss":8.8,"epss":0.0052,"slug":"cve-2026-84647-stapler-type-instantiation-bypass-in-jenkins","title":"Stapler type instantiation bypass in Jenkins","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.437+00:00","url":"https://junglewise.ai/threats/cve-2026-84647-stapler-type-instantiation-bypass-in-jenkins"},{"cve":"CVE-2026-84646","cvss":4.3,"epss":0.0034,"slug":"cve-2026-84646-jenkins-user-object-deserialization-bypass","title":"Jenkins user object deserialization bypass","severity":"medium","exploited":false,"published_at":"2026-09-02T16:17:29.313+00:00","url":"https://junglewise.ai/threats/cve-2026-84646-jenkins-user-object-deserialization-bypass"},{"cve":"CVE-2026-84645","cvss":8.8,"epss":0.0079,"slug":"cve-2026-84645-jenkins-deserialization-rce-in-config-xml-handling","title":"Jenkins deserialization RCE in config.xml handling","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.193+00:00","url":"https://junglewise.ai/threats/cve-2026-84645-jenkins-deserialization-rce-in-config-xml-handling"},{"cve":"CVE-2026-53442","cvss":5.3,"epss":0.0023,"slug":"cve-2026-53442-jenkins-plaintext-secret-storage-in-job-config-xml-submissions","title":"Jenkins plaintext secret storage in job config.xml submissions","severity":"medium","exploited":false,"published_at":"2026-06-10T14:16:37.18+00:00","url":"https://junglewise.ai/threats/cve-2026-53442-jenkins-plaintext-secret-storage-in-job-config-xml-submissions"},{"cve":"CVE-2026-53440","cvss":4.3,"epss":0.0036,"slug":"cve-2026-53440-jenkins-open-redirect-in-delegate-to-servlet-container-security","title":"Jenkins open redirect in Delegate to servlet container security realm","severity":"medium","exploited":false,"published_at":"2026-06-10T14:16:36.99+00:00","url":"https://junglewise.ai/threats/cve-2026-53440-jenkins-open-redirect-in-delegate-to-servlet-container-security"},{"cve":"CVE-2026-53439","cvss":4.3,"epss":0.003,"slug":"cve-2026-53439-jenkins-missing-permission-checks-in-user-profile-endpoints","title":"Jenkins missing permission checks in user profile endpoints","severity":"medium","exploited":false,"published_at":"2026-06-10T14:16:36.893+00:00","url":"https://junglewise.ai/threats/cve-2026-53439-jenkins-missing-permission-checks-in-user-profile-endpoints"},{"cve":"CVE-2026-53437","cvss":4.3,"epss":0.0068,"slug":"cve-2026-53437-jenkins-open-redirect-via-tab-or-newline-characters-in-login-url","title":"Jenkins open redirect via tab or newline characters in login URL","severity":"medium","exploited":false,"published_at":"2026-06-10T14:16:36.677+00:00","url":"https://junglewise.ai/threats/cve-2026-53437-jenkins-open-redirect-via-tab-or-newline-characters-in-login-url"},{"cve":"CVE-2026-53436","cvss":4.3,"epss":0.0036,"slug":"cve-2026-53436-jenkins-open-redirect-via-relative-path-segments-in-login-flow","title":"Jenkins open redirect via relative path segments in login flow","severity":"medium","exploited":false,"published_at":"2026-06-10T14:16:36.547+00:00","url":"https://junglewise.ai/threats/cve-2026-53436-jenkins-open-redirect-via-relative-path-segments-in-login-flow"},{"cve":"CVE-2026-53435","cvss":8.8,"epss":0.0216,"slug":"cve-2026-53435-jenkins-arbitrary-type-deserialization-in-config-xml-processing","title":"Jenkins arbitrary type deserialization in config.xml processing","severity":"high","exploited":false,"published_at":"2026-06-10T14:16:36.44+00:00","url":"https://junglewise.ai/threats/cve-2026-53435-jenkins-arbitrary-type-deserialization-in-config-xml-processing"},{"cve":"CVE-2024-23897","cvss":3.1,"epss":1,"slug":"cve-2024-23897-jenkins-command-line-interface-cli-path-traversal-vulnerability","title":"Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE","severity":"critical","exploited":true,"published_at":"2024-01-24T18:31:02+00:00","url":"https://junglewise.ai/threats/cve-2024-23897-jenkins-command-line-interface-cli-path-traversal-vulnerability"},{"cve":"CVE-2015-5317","cvss":3.1,"epss":0.23,"slug":"cve-2015-5317-jenkins-user-interface-ui-information-disclosure-vulnerability","title":"Jenkins discloses project names via fingerprints","severity":"critical","exploited":true,"published_at":"2022-05-13T01:30:06+00:00","url":"https://junglewise.ai/threats/cve-2015-5317-jenkins-user-interface-ui-information-disclosure-vulnerability"},{"cve":"CVE-2017-1000353","cvss":3,"epss":0.9968,"slug":"cve-2017-1000353-jenkins-remote-code-execution-via-cli-java-deserialization","title":"Deserialization of Untrusted Data in Jenkins","severity":"critical","exploited":true,"published_at":"2022-05-13T01:01:03+00:00","url":"https://junglewise.ai/threats/cve-2017-1000353-jenkins-remote-code-execution-via-cli-java-deserialization"},{"cve":"CVE-2018-1000861","cvss":3,"epss":0.9833,"slug":"cve-2018-1000861-jenkins-stapler-web-framework-deserialization-of-untrusted-data","title":"Deserialization of Untrusted Data in Jenkins","severity":"critical","exploited":true,"published_at":"2022-05-13T01:01:00+00:00","url":"https://junglewise.ai/threats/cve-2018-1000861-jenkins-stapler-web-framework-deserialization-of-untrusted-data"},{"cve":"CVE-2016-9299","cvss":9.8,"epss":0.9694,"slug":"cve-2016-9299-jenkins-remoting-module-java-deserialization-rce-via-ldap-query","title":"Jenkins remoting module Java deserialization RCE via LDAP query","severity":"critical","exploited":false,"published_at":"2017-01-12T23:59:00.527+00:00","url":"https://junglewise.ai/threats/cve-2016-9299-jenkins-remoting-module-java-deserialization-rce-via-ldap-query"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":13},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Jenkins Script Security Plugin","slug":"script-security-plugin","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/script-security-plugin"},{"name":"Jenkins Script Security","slug":"script-security","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/script-security"},{"name":"Jenkins Mcp Server","slug":"mcp-server","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/mcp-server"},{"name":"Jenkins Pipeline: Groovy Libraries Plugin","slug":"pipeline-groovy-libraries-plugin","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/pipeline-groovy-libraries-plugin"}],"technology":{"hub":true,"name":"Jenkins","slug":"jenkins","vendor":{"name":"Jenkins","slug":"jenkins","url":"https://junglewise.ai/threats/vendors/jenkins"},"aliases":[],"category":"ci-cd","description":"An open-source automation server used for continuous integration and continuous delivery.","url":"https://junglewise.ai/threats/technologies/jenkins"},"most_severe":[{"cve":"CVE-2024-23897","cvss":3.1,"epss":1,"slug":"cve-2024-23897-jenkins-command-line-interface-cli-path-traversal-vulnerability","title":"Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE","severity":"critical","exploited":true,"published_at":"2024-01-24T18:31:02+00:00","url":"https://junglewise.ai/threats/cve-2024-23897-jenkins-command-line-interface-cli-path-traversal-vulnerability"},{"cve":"CVE-2015-5317","cvss":3.1,"epss":0.23,"slug":"cve-2015-5317-jenkins-user-interface-ui-information-disclosure-vulnerability","title":"Jenkins discloses project names via fingerprints","severity":"critical","exploited":true,"published_at":"2022-05-13T01:30:06+00:00","url":"https://junglewise.ai/threats/cve-2015-5317-jenkins-user-interface-ui-information-disclosure-vulnerability"},{"cve":"CVE-2017-1000353","cvss":3,"epss":0.9968,"slug":"cve-2017-1000353-jenkins-remote-code-execution-via-cli-java-deserialization","title":"Deserialization of Untrusted Data in Jenkins","severity":"critical","exploited":true,"published_at":"2022-05-13T01:01:03+00:00","url":"https://junglewise.ai/threats/cve-2017-1000353-jenkins-remote-code-execution-via-cli-java-deserialization"},{"cve":"CVE-2018-1000861","cvss":3,"epss":0.9833,"slug":"cve-2018-1000861-jenkins-stapler-web-framework-deserialization-of-untrusted-data","title":"Deserialization of Untrusted Data in Jenkins","severity":"critical","exploited":true,"published_at":"2022-05-13T01:01:00+00:00","url":"https://junglewise.ai/threats/cve-2018-1000861-jenkins-stapler-web-framework-deserialization-of-untrusted-data"},{"cve":"CVE-2016-9299","cvss":9.8,"epss":0.9694,"slug":"cve-2016-9299-jenkins-remoting-module-java-deserialization-rce-via-ldap-query","title":"Jenkins remoting module Java deserialization RCE via LDAP query","severity":"critical","exploited":false,"published_at":"2017-01-12T23:59:00.527+00:00","url":"https://junglewise.ai/threats/cve-2016-9299-jenkins-remoting-module-java-deserialization-rce-via-ldap-query"},{"cve":"CVE-2026-53435","cvss":8.8,"epss":0.0216,"slug":"cve-2026-53435-jenkins-arbitrary-type-deserialization-in-config-xml-processing","title":"Jenkins arbitrary type deserialization in config.xml processing","severity":"high","exploited":false,"published_at":"2026-06-10T14:16:36.44+00:00","url":"https://junglewise.ai/threats/cve-2026-53435-jenkins-arbitrary-type-deserialization-in-config-xml-processing"},{"cve":"CVE-2026-84645","cvss":8.8,"epss":0.0079,"slug":"cve-2026-84645-jenkins-deserialization-rce-in-config-xml-handling","title":"Jenkins deserialization RCE in config.xml handling","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.193+00:00","url":"https://junglewise.ai/threats/cve-2026-84645-jenkins-deserialization-rce-in-config-xml-handling"},{"cve":"CVE-2026-84648","cvss":8.8,"epss":0.0058,"slug":"cve-2026-84648-jenkins-system-log-viewer-stored-xss-in-metadata","title":"Jenkins system log viewer stored XSS in metadata","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.527+00:00","url":"https://junglewise.ai/threats/cve-2026-84648-jenkins-system-log-viewer-stored-xss-in-metadata"},{"cve":"CVE-2026-84647","cvss":8.8,"epss":0.0052,"slug":"cve-2026-84647-stapler-type-instantiation-bypass-in-jenkins","title":"Stapler type instantiation bypass in Jenkins","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.437+00:00","url":"https://junglewise.ai/threats/cve-2026-84647-stapler-type-instantiation-bypass-in-jenkins"},{"cve":"CVE-2026-84650","cvss":8.8,"epss":0.0047,"slug":"cve-2026-84650-jenkins-transient-field-deserialization-bypass","title":"Jenkins transient field deserialization bypass","severity":"high","exploited":false,"published_at":"2026-09-02T16:17:29.713+00:00","url":"https://junglewise.ai/threats/cve-2026-84650-jenkins-transient-field-deserialization-bypass"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}