CVE-2026-70448

—

CVSS 3.1

7.1 high

EPSS

<1%p9

Published

Aug 5, 2026 (Aug 5, 2026)

Modified

Aug 31, 2026

Description

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files.

Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.