en
Jenkins is an open source automation server project. It operates as a platform for building, testing, and delivering software, driven by a global developer and user community. It supports a large ecosystem of plugins and core capabilities suitable for enterprise and open-source use.
As of 09/13/2026, Jenkins project recorded 84 security vulnerabilities in the last 90 days across 50 products, including 25 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Jenkins had the most security vulnerabilities in the Jenkins project ecosystem, with 18 vulnerabilities—approximately 21.43% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-84677 | Exploitation statusNot known exploited | FixYes | Affected productJenkins update-center2 | Published09/02/2026 | SeverityMedium |
CVE-2026-84676 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Parameterized Remote Trigger Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84675 | Exploitation statusNot known exploited | FixYes | Affected productJenkins TICS Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84674 | Exploitation statusNot known exploited | FixYes | Affected productJenkins XebiaLabs XL Deploy Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84673 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Customizable Header Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84672 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Microsoft Entra ID (previously Azure AD) Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84671 | Exploitation statusNot known exploited | FixYes | Affected productJenkins File Parameter Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84670 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Performance Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84669 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Allure Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84668 | Exploitation statusNot known exploited | FixYes | Affected productJenkins SAML Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84667 | Exploitation statusNot known exploited | FixYes | Affected productJenkins ThinBackup Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84666 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Job Configuration History Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84665 | Exploitation statusNot known exploited | FixYes | Affected productJenkins SonarQube Scanner Plugin | Published09/02/2026 | SeverityHigh |
CVE-2026-84664 | Exploitation statusNot known exploited | FixYes | Affected productJenkins GitLab Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84663 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Pipeline: Groovy Libraries Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84662 | Exploitation statusNot known exploited | FixYes | Affected productJenkins LDAP Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84661 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Pipeline: Build Step Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84660 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Pipeline: Build Step Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84659 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Script Security Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84658 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Script Security Plugin | Published09/02/2026 | SeverityMedium |
CVE-2026-84657 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityMedium |
CVE-2026-84656 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityMedium |
CVE-2026-84655 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityMedium |
CVE-2026-84654 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityMedium |
CVE-2026-84653 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityLow |
CVE-2026-84652 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityHigh |
CVE-2026-84651 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityMedium |
CVE-2026-84650 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityHigh |
CVE-2026-84649 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityHigh |
CVE-2026-84648 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityHigh |
CVE-2026-84647 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityHigh |
CVE-2026-84646 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityMedium |
CVE-2026-84645 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published09/02/2026 | SeverityHigh |
CVE-2026-19429 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/10/2026 | SeverityUnknown |
CVE-2026-70448 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Ivy Report Plugin | Published08/05/2026 | SeverityHigh |
CVE-2026-70447 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins AWS CodeBuild Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70446 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins CodeSonar Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70445 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Sauce OnDemand Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70444 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Violation Comments to GitLab Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70443 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Horreum Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70442 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Google Chat Notification Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70441 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Summary Display Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70440 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Qualys Container Scanning Connector Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70439 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins XML Job to Job DSL Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70438 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Parameterized Remote Trigger Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70437 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Webhook Secret Credentials Provider Plugin | Published08/05/2026 | SeverityLow |
CVE-2026-70436 | Exploitation statusNot known exploited | FixYes | Affected productJenkins External Workspace Manager Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70435 | Exploitation statusNot known exploited | FixYes | Affected productJenkins SCM-Manager Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70434 | Exploitation statusNot known exploited | FixYes | Affected productJenkins SCM-Manager Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70433 | Exploitation statusNot known exploited | FixYes | Affected productJenkins HCL AppScan Plugin | Published08/05/2026 | SeverityMedium |
CVE-2026-70432 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Multijob Plugin | Published08/05/2026 | SeverityHigh |
CVE-2026-70431 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Multijob Plugin | Published08/05/2026 | SeverityHigh |
CVE-2026-70430 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published08/05/2026 | SeverityLow |
CVE-2026-70429 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published08/05/2026 | SeverityHigh |
CVE-2026-70428 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published08/05/2026 | SeverityMedium |
CVE-2026-70427 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published08/05/2026 | SeverityMedium |
CVE-2026-70426 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published08/05/2026 | SeverityCritical |
CVE-2026-57307 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Zowe zDevOps Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57306 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Zowe zDevOps Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57305 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Assembla Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57304 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Assembla Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57303 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins Assembla Plugin | Published06/24/2026 | SeverityHigh |
CVE-2026-57302 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins FitNesse Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57301 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins OWASP ZAP Plugin | Published06/24/2026 | SeverityHigh |
CVE-2026-57300 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins MCP Server Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57299 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Contrast Continuous Application Security Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57298 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Contrast Continuous Application Security Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57297 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Contrast Continuous Application Security Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57296 | Exploitation statusNot known exploited | FixYes | Affected productJenkins External Workspace Manager Plugin | Published06/24/2026 | SeverityHigh |
CVE-2026-57295 | Exploitation statusNot known exploited | FixYes | Affected productJenkins EC2 Fleet Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57294 | Exploitation statusNot known exploited | FixYes | Affected productJenkins EC2 Fleet Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57293 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Gitee Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57292 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Gitee Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57291 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Gitee Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57290 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Priority Sorter Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57289 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Bitbucket Push and Pull Request Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57288 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Active Directory Plugin | Published06/24/2026 | SeverityLow |
CVE-2026-57287 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Job Configuration History Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57286 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Git Parameter Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57285 | Exploitation statusNot known exploited | FixYes | Affected productJenkins GitHub Branch Source Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57284 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Pipeline: Groovy Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57283 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Pipeline: Groovy Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57282 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Git Client Plugin | Published06/24/2026 | SeverityMedium |
CVE-2026-57281 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Script Security Plugin | Published06/24/2026 | SeverityHigh |
CVE-2026-57280 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Script Security Plugin | Published06/24/2026 | SeverityHigh |
CVE-2026-53442 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityMedium |
CVE-2026-53441 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityMedium |
CVE-2026-53440 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityMedium |
CVE-2026-53439 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityMedium |
CVE-2026-53438 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityMedium |
CVE-2026-53437 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityHigh |
CVE-2026-53436 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityMedium |
CVE-2026-53435 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins | Published06/10/2026 | SeverityHigh |
CVE-2026-9674 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Multijob Plugin | Published05/27/2026 | SeverityMedium |
CVE-2026-48927 | Exploitation statusNot known exploited | FixNot confirmed | Affected productJenkins buildgraph-view Plugin | Published05/27/2026 | SeverityMedium |
CVE-2026-48926 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Job Import Plugin | Published05/27/2026 | SeverityMedium |
CVE-2026-48925 | Exploitation statusNot known exploited | FixYes | Affected productJenkins GitHub Integration Plugin | Published05/27/2026 | SeverityMedium |
CVE-2026-48924 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Bitbucket OAuth Plugin | Published05/27/2026 | SeverityMedium |
CVE-2026-48923 | Exploitation statusNot known exploited | FixYes | Affected productJenkins AppSpider Plugin | Published05/27/2026 | SeverityMedium |
CVE-2026-48922 | Exploitation statusNot known exploited | FixYes | Affected productJenkins Credentials Binding Plugin | Published05/27/2026 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
%20Plugin.svg){kind=icon}
