CVE-2026-70426

The Remoting component (versions 3384.v60d89463d9e0 and earlier, excluding 3355.3357.v931d3c992987 ) included in Jenkins versions 2.575 and earlier (and LTS 2.568.1 and earlier) is vulnerable to a deserialization filter bypass. The root cause is that the JEP-200 class filter is not applied to cla...