CVE-2026-27099

The Jenkins automation server is affected by a stored cross-site scripting (XSS) vulnerability in versions 2.483 through 2.550 (both inclusive) and LTS 2.492.1 through 2.541.1 (both inclusive). The root cause is the lack of escaping for user-provided descriptions within the "Mark temporarily offl...