Jenkins project — Vulnerabilities & Security Advisories 1598

Browse all 1598 CVE security advisories affecting Jenkins project. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Jenkins is an open-source automation server primarily used for continuous integration and continuous delivery (CI/CD) pipelines. As a widely adopted tool in software development, it facilitates the building, testing, and deployment of code. Historically, the platform has been susceptible to numerous security flaws, with over 1,400 Common Vulnerabilities and Exposures (CVEs) recorded. These vulnerabilities frequently involve remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, often stemming from insecure default configurations or improper input validation. A notable incident occurred in 2019 when a critical RCE flaw allowed attackers to execute arbitrary commands on build agents. The Jenkins project has since implemented stricter security defaults and improved access controls to mitigate these risks. Despite these efforts, the sheer volume of historical CVEs highlights the complexity of securing a long-standing, feature-rich automation ecosystem, requiring diligent maintenance and configuration management by administrators to ensure robust protection against potential exploits.

Found 137 results / 1598 Clear Filters

Top products by Jenkins project: Jenkins Jenkins Script Security Plugin Jenkins Pipeline: Groovy Plugin Jenkins Active Directory Plugin Jenkins Email Extension Plugin Jenkins Job Configuration History Plugin Jenkins GitLab Plugin Jenkins Pipeline: Shared Groovy Libraries Plugin Jenkins OpenId Connect Authentication Plugin Jenkins NS-ND Integration Performance Publisher Plugin Jenkins Build Failure Analyzer Plugin Jenkins OpenShift Deployer Plugin Jenkins XebiaLabs XL Deploy Plugin Jenkins SAML Single Sign On(SSO) Plugin Jenkins Configuration as Code Plugin Jenkins Git Plugin Jenkins Amazon EC2 Plugin Jenkins Rundeck Plugin Jenkins Azure VM Agents Plugin Jenkins Deployment Dashboard Plugin Jenkins Artifactory Plugin Jenkins Pipeline Maven Integration Plugin Jenkins ElectricFlow Plugin Jenkins Gitlab Authentication Plugin Jenkins Project Inheritance Plugin Jenkins HTML Publisher Plugin Jenkins Repository Connector Plugin Jenkins Config File Provider Plugin Jenkins HashiCorp Vault Plugin Jenkins Git Parameter Plugin

CVEs 1598

CVE ID	Title	CVSS	Severity	Published
CVE-2026-84657	Jenkins 授权问题漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84656	Jenkins 授权问题漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84654	Jenkins 输入验证错误漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84655	Jenkins 输出处理不当漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84653	Jenkins 安全漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84652	Jenkins 安全漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84651	Jenkins 权限许可和访问控制问题漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84650	Jenkins 反序列化注入漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84649	Jenkins 跨站请求伪造漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84647	Jenkins 反序列化注入漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84648	Jenkins 跨站脚本漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84646	Jenkins 反序列化注入漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-84645	Jenkins 输入验证错误漏洞 — Jenkins	-	-	2026-09-02
CVE-2026-70430	Jenkins 安全漏洞 — Jenkins	-	-	2026-08-05
CVE-2026-70429	Jenkins 安全漏洞 — Jenkins	-	-	2026-08-05
CVE-2026-70427	Jenkins 后置链接漏洞 — Jenkins	-	-	2026-08-05
CVE-2026-70428	Jenkins 路径遍历漏洞 — Jenkins	-	-	2026-08-05
CVE-2026-70426	Jenkins 反序列化注入漏洞 — Jenkins	-	-	2026-08-05
CVE-2026-53442	Jenkins 安全漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-53441	Jenkins 安全漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-53440	Jenkins 输入验证错误漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-53439	Jenkins 安全漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-53438	Jenkins 安全漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-53437	Jenkins 输入验证错误漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-53436	Jenkins 输入验证错误漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-53435	Jenkins 代码问题漏洞 — Jenkins	-	-	2026-06-10
CVE-2026-33002	Jenkins 安全漏洞 — Jenkins	7.5	-	2026-03-18
CVE-2026-33001	Jenkins 安全漏洞 — Jenkins	7.8	-	2026-03-18
CVE-2026-27100	Jenkins 安全漏洞 — Jenkins	4.3^AI	Medium ^AI	2026-02-18
CVE-2026-27099	Jenkins 安全漏洞 — Jenkins	5.4^AI	Medium ^AI	2026-02-18

This page lists every published CVE security advisory associated with Jenkins project. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.