2026 CVE Vulnerabilities
60,172 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57307 | MEDIUM | 4.2 | 0.1% | Jun 24, 2026 | A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Ove... |
| CVE-2026-57306 | MEDIUM | 4.2 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier al... |
| CVE-2026-57305 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect... |
| CVE-2026-57304 | MEDIUM | 5.4 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to c... |
| CVE-2026-57303 | HIGH | 7.1 | 0.2% | Jun 24, 2026 | Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, ... |
| CVE-2026-57302 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller,... |
| CVE-2026-57301 | HIGH | 8.8 | 0.4% | Jun 24, 2026 | Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned ... |
| CVE-2026-57300 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read... |
| CVE-2026-57299 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers wi... |
| CVE-2026-57298 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and ea... |
| CVE-2026-57297 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers ... |
| CVE-2026-57296 | HIGH | 8.8 | 0.6% | Jun 24, 2026 | Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom works... |
| CVE-2026-57295 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allow... |
| CVE-2026-57294 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers with Overal... |
| CVE-2026-57293 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Ite... |
| CVE-2026-57292 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attac... |
| CVE-2026-57291 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read pe... |
| CVE-2026-57290 | MEDIUM | 4.3 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Priority Sorter Plugin 936.v2c01c6b_84449 and earlier allow... |
| CVE-2026-57289 | MEDIUM | 4.8 | 0.1% | Jun 24, 2026 | Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostna... |
| CVE-2026-57288 | LOW | 3.7 | 0.2% | Jun 24, 2026 | Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter ... |
| CVE-2026-57287 | MEDIUM | 4.3 | 0.1% | Jun 24, 2026 | Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secret... |
| CVE-2026-57286 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with Item/Rea... |
| CVE-2026-57285 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers w... |
| CVE-2026-57284 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated thro... |
| CVE-2026-57283 | MEDIUM | 4.3 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allo... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now