4.3 Medium
CVE-2026-53437
Jenkins Project Jenkins vulnerability
Jenkins ProjectJenkins
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
0.7%probability of exploitation in the next 30 days
Higher than 52% of scored CVEs
SeverityCVSS
4.3Medium
Description NVD
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks.
Coverage 1 article · 1 outlet
- Jenkins advisory flags critical deserialization flaw and bugsSecurityOnline · first in our coverage · mentions it in passing