CVE-2026-70437
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected webhook bearer token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook bearer token.
| Vendor | jenkins project |
| Product | jenkins webhook secret credentials provider plugin |
| Published | Aug 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins webhook secret credentials provider plugin
Be the first to know when new unknown vulnerabilities affecting jenkins project jenkins webhook secret credentials provider plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins Webhook Secret Credentials Provider Plugin
0 ≤ 16.v0cfa_f0215cf5