CVE-2026-33004

—

CVSS 3.1

4.3 medium

EPSS

<1%p12

Published

Mar 18, 2026 (Mar 18, 2026)

Modified

Jun 17, 2026

Description

Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Vendors: jenkins
Products: loadninja
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.