CVE-2026-33002

creationtimestamp| type| source ---|---|--- 2026-03-21 18:44:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mhlorq4jdy2i...

CVE-2026-33002

Jenkins versions 2.442 through 2.554 (inclusive) and LTS 2.426.3 through 2.541.2 (inclusive) are vulnerable to a DNS rebinding attack . The flaw exists in the CLI WebSocket endpoint , where the software performs origin validation by computing the expected origin using the Host or X-Forwarded-Host...