CVE-2026-70439 in XML Job to Job DSL Plugin

Sumário

de MITRE • 05/08/2026

Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: Jenkins
• Reservar: 04/08/2026
• Divulgação: 05/08/2026
• Moderação: aceite
• Entrada: VDB-386342
• CPE: pronto
• CWE: CWE-275 (confirmado)
• CVSS: 9.9 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Telecommunication, Insurance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-70439
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70439
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-70439/