CVE-2026-33002

creationtimestamp| type| source ---|---|--- 2026-03-21 18:44:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mhlorq4jdy2i...

CVE-2026-33002

Summary: CVE-2026-33002 affects Jenkins WebSocket CLI origin validation. The vulnerability arises from computing the expected origin using the Host or X-Forwarded-Host headers, enabling potential DNS rebinding to bypass origin validation. Affected versions include Jenkins 2.442–2.554 and LTS 2.42...