4.3

CVE-2026-84659

EPSS 0.17%
Veröffentlicht 02.09.2026 15:40:47
Zuletzt bearbeitet 22.09.2026 13:24:19
Erkennungen
Login

Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Jenkins ≫ Script Security SwPlatform jenkins Version <= 1412.v7737b_3405f86

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.17%	0.064

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3986

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-84659

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-84659

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-84659

EUVD