CVE-2026-70443

The Jenkins Horreum Plugin version 0.16.162.v33b_4a_a_b_5f828 and earlier is vulnerable to a credentials exposure issue. The plugin fails to set the correct context during credentials lookup, which allows users with Item/Configure permissions to trigger Jenkins to send System-scoped credentials t...