Media
CVE-2026-57298
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.072
Restablecer filtros
Alta
CVE-2026-57301
Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE
Media
CVE-2026-57291
Jenkins Gitee Plugin missing permission checks
Media
CVE-2026-57292
Jenkins Gitee Plugin has a cross-site request forgery vulnerability
Media
CVE-2026-57289
Jenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation
Media
CVE-2026-57290
Jenkins Priority Sorter Plugin has a CSRF vulnerability
Alta
CVE-2026-57296
Jenkins External Workspace Manager Plugin has a path traversal vulnerability
Media
CVE-2026-57297
Jenkins Contrast Continuous Application Security Plugin has a missing permission check
Media
CVE-2026-57294
Jenkins EC2 Fleet Plugin has a missing permission check
Media
CVE-2026-57295
Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability
Media
CVE-2026-57293
Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs
Baja
CVE-2026-57288
Jenkins Active Directory Plugin has an LDAP injection vulnerability
Media
CVE-2026-57282
Jenkins Git client Plugin has an OS command injection vulnerability on agents
Alta
CVE-2026-57281
Jenkins Script Security Plugin has a script security bypass vulnerability
Media
CVE-2026-57285
Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs
Media
CVE-2026-57284
Jenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types
Media
CVE-2026-57286
Jenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names
Media
CVE-2026-57287
Jenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations
Alta
CVE-2026-57280
Jenkins Script Security Plugin sandbox bypass vulnerability
Media
CVE-2026-57283
Jenkins Pipeline: Groovy Plugin has a CSRF vulnerability
Media
CVE-2026-48480
OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation
Alta
CVE-2026-41862
Spring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlist
Media
CVE-2026-54517
jackson-databind has @JsonView bypass for setterless creator properties
Media
CVE-2026-54516
jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.