Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how jenkins compares to other vendors in security performance

View Risk Score →

Software

jenkins
278
jenkins lts
240
jenkins jenkins
84
jenkins pipeline
30
jenkins jenkins lts
18
jenkins script security
18
jenkins script security jenkins
14
jenkins pipeline\
10
jenkins kubernetes ci
9
jenkins build failure analyzer plugin
8
jenkins config file provider
8
jenkins configuration as code
8
jenkins email extension template
8
jenkins active directory
7
jenkins openid
7
jenkins repository connector
7
jenkins script security plugin
7
jenkins azure vm agents
6
jenkins bitbucket oauth
6
jenkins deployment dashboard plugin
6
jenkins active choices
5
jenkins active directory jenkins
5
jenkins cadence vmanager plugin
5
jenkins code dx
5
jenkins credentials binding
5
jenkins electricflow
5
jenkins active directory plugin
4
jenkins assembla jenkins
4
jenkins aws codecommit trigger
4
jenkins azure ad
4
jenkins compuware topaz for total test jenkins
4
jenkins cons3rt jenkins
4
jenkins continuous integration with toad edge
4
jenkins convertigo mobile platform
4
jenkins delphix
4
jenkins dingding-notifications
4
jenkins extended choice parameter
4
jenkins fortify
4
jenkins icescrum
4
jenkins ns-nd integration performance publisher jenkins
4
jenkins openid connect authentication plugin
4
jenkins pipeline maven integration
4
jenkins promoted builds
4
jenkins relution enterprise appstore publisher
4
jenkins saml single sign on jenkins
4
jenkins subversion
4
jenkins appspider jenkins
3
jenkins audit to database
3
jenkins autocomplete parameter
3
jenkins azure credentials
3

Jenkins Script Security PluginJenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformat…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2492200

Jenkins Zowe zDevOps PluginA missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allow…

Risk 30
Severity
4.2
First published (updated )
CVE-2026-57307

Zowe Zowe zDevOps PluginCSRF

Risk 30
Severity
4.2
First published (updated )
CVE-2026-57306

Jenkins Assembla PluginA missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/…

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57304

Jenkins Jenkins Assembla PluginCSRF

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57305
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

jenkins/assembla-pluginSSRF

Risk 50
Severity
7.1
First published (updated )
CVE-2026-57303

Jenkins FitNesse PluginJenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57302

Jenkins OWASP ZAP PluginJenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rathe…

Risk 82
Severity
8.8
First published (updated )
CVE-2026-57301

Jenkins MCP Server PluginA missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows atta…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57300

Contrast Security Jenkins Contrast Continuous Application Security PluginMissing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlie…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57299
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins External Workspace Manager PluginPath Traversal

Risk 82
Severity
8.8
First published (updated )
CVE-2026-57296

Contrast Security Contrast Continuous Application Security PluginA missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earli…

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57297

Jenkins EC2 Fleet PluginCSRF

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57295

Jenkins EC2 Fleet PluginA missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows a…

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57294

Jenkins Gitee PluginAn incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attac…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57293
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Gitee PluginMissing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers …

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57291

Jenkins Gitee PluginCSRF

Risk 36
Severity
5.4
First published (updated )
CVE-2026-57292

Jenkins Priority Sorter PluginCSRF

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57290

Jenkins Bitbucket Push and Pull Request PluginJenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS ce…

Risk 33
Severity
4.8
First published (updated )
CVE-2026-57289

Jenkins Active Directory PluginJenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the…

Risk 21
Severity
3.7
First published (updated )
CVE-2026-57288
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Job Configuration History PluginJenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encryp…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57287

Jenkins Git Parameter PluginA missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows att…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57286

Jenkins Pipeline: Groovy PluginJenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can …

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57284

Jenkins GitHub Branch Source PluginA missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlie…

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57285

Jenkins Pipeline: Groovy PluginCSRF

Risk 23
Severity
4.3
First published (updated )
CVE-2026-57283
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Git client PluginOS Command Injection

Risk 41
Severity
5
First published (updated )
CVE-2026-57282

Jenkins Script Security PluginCRLF Injection

Risk 77
Severity
8.5
First published (updated )
CVE-2026-57281

Jenkins Script Security PluginJenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type c…

Risk 82
Severity
8.8
First published (updated )
CVE-2026-57280

oss-secMultiple vulnerabilities in Jenkins plugins

First published (updated )
https://seclists.org/oss-sec/2026/q2/1015

Jenkins JenkinsJenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after l…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2487544
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203