PT-2026-51814

Name of the Vulnerable Software and Affected Versions Jenkins Assembla Plugin versions prior to 1.5 Description A missing permission check allows users with Overall/Read permission to force the system to connect to an arbitrary URL using a specified username and password. Recommendations Update...

PT-2026-51808

A cross-site request forgery CSRF vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacker-specified URL using an attacker-specified username, API key, and service key...

org.jenkins-ci.main:jenkins-test-harness (1.412), org.jenkins-ci.main:jenkins-war (1.412) +5 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.412)

org.jenkins-ci.main:jenkins-core MAVEN version 1.412 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.412 - org.jenkins-ci.main:jenkins-war 1.412 -...

org.bravo5.jenkins.plugins:vertx (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.482) +4 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.482)

org.jenkins-ci.main:jenkins-core MAVEN version 1.482 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.bravo5.jenkins.plugins:vertx =1.0.0, =1.0.1 - org.jenkins-ci.main:jenkins-test-harness 1.48...

net.hurstfrost.jenkins:avatar (>=1.1, <=1.2), org.jenkins-ci.main:jenkins-test-harness (1.434) +11 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.434)

org.jenkins-ci.main:jenkins-core MAVEN version 1.434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.hurstfrost.jenkins:avatar =1.1, =0.2.0, =0.5, =1.0 - org.jvnet.hudson.plugins:sitemonitor 0...

org.jenkins-ci.main:jenkins-test-harness (1.611), org.jenkins-ci.main:jenkins-war (1.611) +3 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.611)

org.jenkins-ci.main:jenkins-core MAVEN version 1.611 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.611 - org.jenkins-ci.main:jenkins-war 1.611 -...

org.jenkins-ci.main:jenkins-test-harness (1.560), org.jenkins-ci.main:jenkins-war (1.560) +6 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.560)

org.jenkins-ci.main:jenkins-core MAVEN version 1.560 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.560 - org.jenkins-ci.main:jenkins-war 1.560 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

com.cloudbees.jenkins.plugins:cloudbees-registration (3.15), com.groupon.jenkins-ci.plugins:dotci (>=2.6.0, <=2.9.2) +16 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.596)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:cloudbees-registration 3.15 - com.groupon.jenkins-ci.plugins:dotc...

com.cloudbees.jenkins.plugins:cloudbees-registration (3.15), com.groupon.jenkins-ci.plugins:dotci (>=2.6.0, <=2.9.2) +16 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.596)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:cloudbees-registration 3.15 - com.groupon.jenkins-ci.plugins:dotc...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.622), org.jenkins-ci.main:jenkins-war (1.622) +2 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.622)

org.jenkins-ci.main:jenkins-core MAVEN version 1.622 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.622 - org.jenkins-ci.main:jenkins-war 1.622 -...

org.jenkins-ci.main:jenkins-test-harness (1.517), org.jenkins-ci.main:jenkins-war (1.517) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.517)

org.jenkins-ci.main:jenkins-core MAVEN version 1.517 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.517 - org.jenkins-ci.main:jenkins-war 1.517 -...

org.jenkins-ci.main:jenkins-test-harness (1.476), org.jenkins-ci.main:jenkins-war (1.476) +4 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.476)

org.jenkins-ci.main:jenkins-core MAVEN version 1.476 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.476 - org.jenkins-ci.main:jenkins-war 1.476 -...

org.jenkins-ci.main:jenkins-test-harness (1.472), org.jenkins-ci.main:jenkins-war (1.472) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.472)

org.jenkins-ci.main:jenkins-core MAVEN version 1.472 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.472 - org.jenkins-ci.main:jenkins-war 1.472 -...

net.praqma:matrix-reloaded (>=1.0.2, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.418) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.418)

org.jenkins-ci.main:jenkins-core MAVEN version 1.418 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:matrix-reloaded =1.0.2, =1.4, =1.5 - org.jenkins-ci.plugins:plugin 1.418 Source cves...

org.jenkins-ci.main:jenkins-test-harness (1.421), org.jenkins-ci.main:jenkins-war (1.421) +7 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.421)

org.jenkins-ci.main:jenkins-core MAVEN version 1.421 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.421 - org.jenkins-ci.main:jenkins-war 1.421 -...

com.mtvi.plateng.hudson:ldapemail (0.8), org.jenkins-ci.main:jenkins-test-harness (1.436) +7 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.436)

org.jenkins-ci.main:jenkins-core MAVEN version 1.436 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.mtvi.plateng.hudson:ldapemail 0.8 - org.jenkins-ci.main:jenkins-test-harness 1.436 -...

org.jenkins-ci.main:jenkins-test-harness (1.457), org.jenkins-ci.main:jenkins-war (1.457) +7 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.457)

org.jenkins-ci.main:jenkins-core MAVEN version 1.457 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.457 - org.jenkins-ci.main:jenkins-war 1.457 -...