CVE-2026-84656 in Jenkins Plugin

Resumen

por MITRE • 2026-09-02

A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Jenkins
• Reservar: 2026-09-01
• Divulgación: 2026-09-02
• Moderación: aceptado
• Artículo: VDB-398205
• CPE: listo
• CWE: CWE-275 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Telecommunication

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-84656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-84656
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-84656/