4.3 Medium
CVE-2026-53436
Jenkins Project Jenkins vulnerability
Jenkins ProjectJenkins
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.4%probability of exploitation in the next 30 days
Higher than 29% of scored CVEs
SeverityCVSS
4.3Medium
Description NVD
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.
Coverage 1 article · 1 outlet
- Jenkins advisory flags critical deserialization flaw and bugsSecurityOnline · first in our coverage · mentions it in passing