Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-57290

Quick assessment

Affected

Jenkins Project Jenkins Priority Sorter Plugin

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Jenkins Project Jenkins Priority Sorter Plugin是Jenkins Project团队的一款持续集成和交付项目管理的优先级排序插件。 Jenkins Project Jenkins Priority Sorter Plugin 936.v2c01c6b_84449及之前版本存在跨站请求伪造漏洞，该漏洞源于存在跨站请求伪造（CSRF），可能允许攻击者覆盖全局作业优先级配置。

AI Predicted 6.5 Difficulty: Trivial EPSS 0.25% · P17 Updated Jun 27, 2026

Possible ATT&CK Techniques 2 AI

T1518.001 · Security Software Discovery T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Jenkins Project	Jenkins Priority Sorter Plugin	`≤ 936.v2c01c6b_84449`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57290

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Priority Sorter Plugin 936.v2c01c6b_84449 and earlier allows attackers to overwrite the global job priority configuration.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Jenkins Project Jenkins Priority Sorter Plugin 跨站请求伪造漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Jenkins Project	Jenkins Priority Sorter Plugin	0 ~ 936.v2c01c6b_84449	-

II. Public POCs for CVE-2026-57290

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-57290

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-57290 (1)

🔗 Jenkins Security Advisory 2026-06-24 Read full article vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-57290

Same Patch Batch · Jenkins Project · 2026-06-24 · 28 CVEs total

CVE-2026-57293		Jenkins Project Jenkins Gitee Plugin 授权问题漏洞
CVE-2026-57280		Jenkins Project Jenkins Script Security Plugin 处理逻辑错误漏洞
CVE-2026-57282		Jenkins Project Jenkins Git client Plugin 命令注入漏洞
CVE-2026-57281		Jenkins Project Jenkins Script Security Plugin 处理逻辑错误漏洞
CVE-2026-57283		Jenkins Project Jenkins Pipeline: Groovy Plugin 跨站请求伪造漏洞
CVE-2026-57284		Jenkins Project Jenkins Pipeline: Groovy Plugin 代码注入漏洞
CVE-2026-57285		Jenkins Project Jenkins GitHub Branch Source Plugin 授权问题漏洞
CVE-2026-57287		Jenkins Project Jenkins Job Configuration History Plugin 加密问题漏洞
CVE-2026-57286		Jenkins Project Jenkins Git Parameter Plugin 授权问题漏洞
CVE-2026-57288		Jenkins Project Jenkins Active Directory Plugin 输入验证错误漏洞
CVE-2026-57289		Jenkins Project Jenkins Bitbucket Push and Pull Request Plugin 加密问题漏洞
CVE-2026-57291		Jenkins Project Jenkins Gitee Plugin 授权问题漏洞
CVE-2026-57292		Jenkins Project Jenkins Gitee Plugin 跨站请求伪造漏洞
CVE-2026-57294		Jenkins Project Jenkins EC2 Fleet Plugin 授权问题漏洞
CVE-2026-57307		Jenkins Project Jenkins Zowe zDevOps Plugin 授权问题漏洞
CVE-2026-57295		Jenkins Project Jenkins EC2 Fleet Plugin 跨站请求伪造漏洞
CVE-2026-57296		Jenkins Project Jenkins External Workspace Manager Plugin 路径遍历漏洞
CVE-2026-57297		Jenkins Project Jenkins Contrast Continuous Application Security Plugin 安全漏洞
CVE-2026-57298		Jenkins Project Jenkins Contrast Continuous Application Security Plugin 跨站请求伪造漏洞
CVE-2026-57299		Jenkins Project Jenkins Contrast Continuous Application Security Plugin 安全漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: Jenkins Project