CVE-2026-84666
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings.
| Vendor | jenkins project |
| Product | jenkins job configuration history plugin |
| Published | Sep 2, 2026 |
| Last Updated | Sep 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins job configuration history plugin
Be the first to know when new medium vulnerabilities affecting jenkins project jenkins job configuration history plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins Job Configuration History Plugin
0 ≤ 1367.vc8fa_b_15101dc