๐Ÿ” CVE Alert

CVE-2026-84656

MEDIUM 4.3
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th

A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to.

Vendor jenkins project
Product jenkins
Ecosystems
Industries
Technology
Published Sep 2, 2026
Last Updated Sep 2, 2026
Stay Ahead of the Next One

Get instant alerts for jenkins project jenkins

Be the first to know when new medium vulnerabilities affecting jenkins project jenkins are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Jenkins Project / Jenkins
All versions affected

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
jenkins.io: https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4006