CVE-2026-84653

Jenkins versions 2.421 through 2.579 (inclusive) and LTS 2.426.1 through 2.568.2 (inclusive) contain an insufficient permission check in the Appearance configuration page. The flaw allows an attacker who already holds the Overall/Manage permission to modify Appearance configuration options they s...