CVE-2026-117619

A flaw was found in Jenkins. An attacker who has obtained a user's API token can exploit this vulnerability by submitting HTTP Basic authentication requests to acquire a persistent 'remember me' session cookie. This allows the attacker to maintain unauthorized access to Jenkins even after the...