CVE-2026-70428

Description

References

• jenkins.io/security/advisory/2026-08-05 · Vendor Advisory

More vulnerabilities in jenkins

• CVE-2026-84657MEDIUM 4.2In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s fla…
• CVE-2026-84656MEDIUM 4.3A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one …
• CVE-2026-84655MEDIUM 4.3Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API…
• CVE-2026-84653LOW 3.5Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in t…
• CVE-2026-84652HIGH 7.3In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me…