Skip to content
OpenAdvisories
High WID-SEC-2026-1884 8 CVEs

Jenkins: Mehrere Schwachstellen

Published Jun 10, 2026 · Updated Aug 26, 2026 · Revision 4 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Jenkins Product: openshift Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 8

  • High 8.8
    CVE-2026-53435 Public exploit EPSS 51%

    Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation

    In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled `config.xml` submission in a way that allows them to handle HTTP req…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 5.4
    CVE-2026-53441

    Jenkins: Stored XSS vulnerability in node offline cause description

    Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 5.3
    CVE-2026-53442

    Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations

    Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Ex…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2026-53436

    Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL

    Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2026-53437

    Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL

    Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2026-53438

    Jenkins: Missing permission check allows unauthorized cancellation of queue items

    A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2026-53439

    Jenkins exposes other users' timezone and view names to users with Overall/Read permission

    Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to enumerate view names of other users' "My Views".

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2026-53440

    Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"

    Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an at…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Revision history

  1. #4

    Neue Updates von Red Hat aufgenommen

  2. #3

    Neue Updates von Red Hat aufgenommen

  3. #2

    Exploit aufgenommen CVE-2026-53435

  4. #1

    Initiale Fassung

References