Medium severity4.3NVD Advisory· Published Sep 2, 2026· Updated Sep 22, 2026
CVE-2026-84658
CVE-2026-84658
Description
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the @DataBoundConstructor annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1412.v7737b_3405f86
Patches
Vulnerability mechanics
References
1- www.jenkins.io/security/advisory/2026-09-02/nvdVendor Advisory
News mentions
2- Jenkins: 25 Vulnerabilities Disclosed Together, Including RCE and XSS FlawsVypr Intelligence · Sep 2, 2026
- Jenkins Security Advisory 2026-09-02Jenkins Security Advisories · Sep 2, 2026