CVE-2024-43044

CVE-2024-43044 Description This script checks Jenkins instances for CVE-2024-43044 by retrieving the Jenkins version from the instance and comparing it against known vulnerable version ranges. CVE-2024-43044 : This vulnerability affects Jenkins core and remoting versions, allowing attackers to...

Exploit for Path Traversal in Jenkins

\ CVE-2024-23897 — Jenkins CLI Arbitrary File Read Lab \ 1...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +2066 more potentially affected by CVE-2026-84651 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.579)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2026-84651 Source advisory: MEND:CVE-2026-84651...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +2066 more potentially affected by CVE-2026-84652 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.579)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2026-84652 Source advisory: MEND:CVE-2026-84652...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +2064 more potentially affected by CVE-2026-84650 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.568.2)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2026-84650 Source advisory: MEND:CVE-2026-84650...

io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=460.ve2a_a_b_066e678), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-84650 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.579)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =444.v568b174ece88, =2.569, =2.579 Source cves: CVE-2026-84650 Source advisory: MEND:CVE-2026-84650...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +2066 more potentially affected by CVE-2026-84648 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.579)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2026-84648 Source advisory: MEND:CVE-2026-84648...

io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=460.ve2a_a_b_066e678), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +5 more potentially affected by CVE-2026-84647 via org.kohsuke.stapler:stapler (>=2092.v91b_2c63e0c97, <=2107.v8dfcb_e8ed317)

org.kohsuke.stapler:stapler MAVEN version =2092.v91b2c63e0c97, =444.v568b174ece88, =2.569, =2.569, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2107.v8dfcbe8ed317 Source cves: CVE-2026-84647 Source advisory: MEND:CVE-2026-84647...

Symlink Attack

Overview org.jenkins-ci.main:jenkins-core is an open source automation server. Affected versions of this package are vulnerable to Symlink Attack via FilePath.untarFrom in core/src/main/java/hudson/FilePath.java. An authenticated attacker with job configuration privileges can exploit TAR extracti...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +2064 more potentially affected by CVE-2026-70429 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.568.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2026-70429 Source advisory: MEND:CVE-2026-70429...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-70429 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.575)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.575 Source cves: CVE-2026-70429 Source advisory: MEND:CVE-2026-70429...

CVE-2026-70426

The Remoting component (versions 3384.v60d89463d9e0 and earlier, excluding 3355.3357.v931d3c992987 ) included in Jenkins versions 2.575 and earlier (and LTS 2.568.1 and earlier) is vulnerable to a deserialization filter bypass. The root cause is that the JEP-200 class filter is not applied to cla...

io.jenkins.plugins:design-library (444.v568b_174ece88), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-70426 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.575)

org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =2.569, =2.575 Source cves: CVE-2026-70426 Source advisory: MEND:CVE-2026-70426...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +2064 more potentially affected by CVE-2026-70426 via org.jenkins-ci.main:jenkins-core (>=1.396, <=2.568.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2026-70426 Source advisory: MEND:CVE-2026-70426...

ROOT-APP-MAVEN-CVE-2026-27099 CVE-2026-27099 in io.root.org.jenkins-ci.main:jenkins-core - Patched by Root

Root has patched CVE-2026-27099 in the io.root.org.jenkins-ci.main:jenkins-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-27100 CVE-2026-27100 in io.root.org.jenkins-ci.main:jenkins-core - Patched by Root

Root has patched CVE-2026-27100 in the io.root.org.jenkins-ci.main:jenkins-core package for Root:Maven. Multiple fixed versions available...

org.jenkins-ci.main:jenkins-test-harness (1.507), org.jenkins-ci.main:jenkins-war (1.507) +3 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.507)

org.jenkins-ci.main:jenkins-core MAVEN version 1.507 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.507 - org.jenkins-ci.main:jenkins-war 1.507 -...

org.jenkins-ci.main:jenkins-test-harness (1.586), org.jenkins-ci.main:jenkins-war (1.586) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.586)

org.jenkins-ci.main:jenkins-core MAVEN version 1.586 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.586 - org.jenkins-ci.main:jenkins-war 1.586 -...

org.cloudsmith.hammer.jenkins:stackhammer (1.0.0), org.jenkins-ci.main:jenkins-test-harness (1.467) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.467)

org.jenkins-ci.main:jenkins-core MAVEN version 1.467 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.cloudsmith.hammer.jenkins:stackhammer 1.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.46...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...