CVE-2026-117622

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

EUVD-2026-112187

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

CVE-2026-117622

Jenkins versions 2.587 and earlier (including LTS 2.580.1 and earlier ) are vulnerable to a cross-site scripting (XSS) vulnerability. The root cause allows agents to send exceptions that implement the Stapler HttpResponse interface back to the controller. This vulnerability is exploitable by atta...

CVE-2026-117622

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

PT-2026-128310

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...