CVE-2026-92122

🗓️ 16 Sep 2026 13:53:03Reported by jenkinsType

Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed script coerces a value to an interface, if the value inherits a method of the same name as an interface me...

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2026-92122	16 Sep 202613:53	–	cve
EUVD	EUVD-2026-80746	16 Sep 202613:53	–	euvd
NVD	CVE-2026-92122	16 Sep 202614:17	–	nvd
Jenkins Security Advisories	Sandbox bypass vulnerability in script-security	16 Sep 202600:00	–	jenkins
Vulnrichment	CVE-2026-92122	16 Sep 202613:53	–	vulnrichment

[
  {
    "vendor": "Jenkins Project",
    "product": "Jenkins Script Security Plugin",
    "versions": [
      {
        "version": "0",
        "versionType": "maven",
        "lessThanOrEqual": "1415.v9a_f9b_3a_c253d",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2026-09-16/

16 Sep 2026 13:53Current