CVE-2026-84653

Jenkins versions 2.421 through 2.579 and LTS 2.426.1 through 2.568.2 contain an incorrect permission check in the Appearance configuration page (introduced in Jenkins 2.421). Attackers holding the Overall/Manage permission can modify Appearance configuration options that should be restricted to a...