Veille CVE

Mercredi 2 septembre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins Script Security Plugin » ✕
  1. CVE-2026-84659 4.3 Moyenne

    Jenkins Project Jenkins Script Security Plugin · Jenkins script security

    Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding.

  2. CVE-2026-84658 4.3 Moyenne

    Jenkins Project Jenkins Script Security Plugin · Jenkins script security

    Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration.