CVE-2026-70432 in Multijob Plugin

Riassunto

di MITRE • 05/08/2026

A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Jenkins
• Prenotare: 04/08/2026
• Divulgazione: 05/08/2026
• Moderazione: accettato
• Voce: VDB-386339
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: basso
• Settore: Telecommunication, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-70432
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70432
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-70432/