Jenkins security advisory 2026-10-28 affects Jenkins Core
The available feed text names Jenkins Core as affected but gives no flaw, version, or fix details.
34
Vendor
Jenkins
- Mentions · 7d1
- Mentions · 30d1
- All mentions7
- First seenSep 2, 2026
- Last mentioned2d ago
Timeline
7 articles · newest firstJenkins Patches 20 Plugin Flaws Leading to RCE, XSS and Credential Theft
Jenkins patched 20 vulnerabilities across 13 plugins, including Groovy sandbox bypasses enabling remote code execution on CI/CD controllers.
58
Multiple vulnerabilities in Jenkins plugins
Jenkins releases security fixes for multiple plugins including Bitbucket, GitLab, Gitee, Coverage, and Gradle integrations.
30
DeepSeek v4.1 Flash Is Now Our Best Hacking Model
DeepSeek V4.1 Flash achieves 11/11 code executions on Enclave's AI hacking benchmark for $4.65 across Grafana, Jenkins, and Nextcloud targets.
60
Jenkins Security Advisory 2026-09-16
Jenkins released a security advisory patching vulnerabilities across 13 plugins, including GitLab, Bitbucket, Gradle, Keycloak Authentication, and Script Security.
28
Jenkins security advisory (AV26-877)
Canada's Cyber Centre relayed a Jenkins advisory (AV26-877) covering core and numerous plugin vulnerabilities fixed in 2.568.3/2.580.
24
Jenkins Security Advisory 2026-09-02
Jenkins releases a security advisory affecting Jenkins Core, update-center2, and 17 plugins including GitLab, SAML, LDAP, Microsoft Entra ID, and Script Security.
25
Related CVEs
by mentions- CVE-2026-92122<1%8.8Sandbox Bypass in Jenkins Script Security Plugin Allows Controller RCE
- Sandbox Bypass in Jenkins Script Security Plugin Enables Controller RCE
- Groovy sandbox bypass in Jenkins Script Security Plugin enables controller RCE
- Sandbox Escape via @Builder Annotation in Jenkins Script Security Plugin
- Stored XSS in Jenkins Coverage Plugin via javascript: Coverage Results ID
- Stored XSS in Jenkins Warnings Plugin via javascript: analysis results ID
- Sandbox Bypass RCE via Auto-Approved Classpath Entries in Jenkins Script Security Plugin
- Stored XSS in Jenkins Gitee Plugin via webhook sender name
- SSRF Credential Capture in Jenkins Bitbucket Push and Pull Request Plugin
- Open Redirect in Jenkins Keycloak Authentication Plugin 2.4.1 and Earlier
Appears with
- Jenkinsproduct · 3
- Jenkinsorganization · 3
- Jenkins Coreproduct · 2
- Microsoft Entra ID pluginproduct · 1
- Grafanaproduct · 1
- DeepSeekvendor · 1
- Jenkins CIproduct · 1
- DeepSeek V4.1 Flashai model · 1
- Nextcloudproduct · 1
- Pipeline: Groovy Libraries pluginproduct · 1
- Script Security pluginproduct · 1
- SonarQube Scanner pluginproduct · 1
- Canadian Centre for Cyber Securityorganization · 1
- update-center2product · 1
- GitLab pluginproduct · 1
- SAML pluginproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.