CVE-2026-53441

CVE-2026-53441 affects Jenkins core/UI configuration handling. Versions affected: Jenkins 2.483–2.567 (inclusive) and LTS 2.492.1–2.555.2 (inclusive). The issue arises because the user-provided description for a generic offline cause can be set via the POST config.xml API, and is not escaped, lea...