4.3 Medium
CVE-2026-53438
Jenkins Project Jenkins vulnerability
Jenkins ProjectJenkins
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
0.3%probability of exploitation in the next 30 days
Higher than 20% of scored CVEs
SeverityCVSS
4.3Medium
Description NVD
A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.
Coverage 1 article · 1 outlet
- Jenkins advisory flags critical deserialization flaw and bugsSecurityOnline · first in our coverage · mentions it in passing