๐Ÿ” CVE Alert

CVE-2026-84675

HIGH 7.4
CVSS Score
7.4
EPSS Score
0.0%
EPSS Percentile
0th

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build.

Vendor jenkins project
Product jenkins tics plugin
Published Sep 2, 2026
Last Updated Sep 2, 2026
Stay Ahead of the Next One

Get instant alerts for jenkins project jenkins tics plugin

Be the first to know when new high vulnerabilities affecting jenkins project jenkins tics plugin are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Jenkins Project / Jenkins TICS Plugin
0 โ‰ค 2025.1.1

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
jenkins.io: https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3987