SecurityOnlineDo Son
Attackers exploit Jenkins flaw to execute code through config.xml
Part of the CVE-2026-53435 story · since 11 Jun
- Thu 11 Jun, 04:22 UTC. SecurityOnline, first report. Jenkins advisory flags critical deserialization flaw and bugs.
- Mon 15 Jun, 10:50 UTC. SecurityOnline. Attackers exploit Jenkins flaw to execute code through config.xml. This article, 2nd of 2.
A critical vulnerability affecting Jenkins, tracked as CVE-2026-53435, allows attackers to execute arbitrary code on Jenkins controllers by exploiting how config.xml files are handled. This flaw has a CVSS score of 8.8 and has been actively exploited within hours of its disclosure, according to threat intelligence firm Defused. To mitigate risks, it is urgent for users to patch their systems, especially those running Jenkins versions 2.567 and earlier, and LTS versions 2.555.2 and earlier. If immediate updates aren’t feasible, restricting network access to affected controllers is recommended.
How the story developed
2 articles from 1 outlet since 11 Jun. Quiet since 15 Jun. This was the 2nd report, 4 days after the first.
- Thu 11 Jun, 04:22 UTC. SecurityOnline, first report. Jenkins advisory flags critical deserialization flaw and bugs.
- Mon 15 Jun, 10:50 UTC. SecurityOnline. Attackers exploit Jenkins flaw to execute code through config.xml. This article, 2nd of 2.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Thu 11 JunDay 01
- Jenkins advisory flags critical deserialization flaw and bugs04:22 · SecurityOnline · First report
Quiet for 4 days
Mon 15 JunDay 41- Attackers exploit Jenkins flaw to execute code through config.xml10:50 · SecurityOnline · Picked up again · This article, 2nd of 2