Veille CVE

Semaine du 31 août au 6 septembre 2026

1 CVE

  1. CVE-2026-84664 5.4 Moyenne

    Jenkins Project Jenkins GitLab Plugin

    Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators.