4.3 Medium
CVE-2026-53439
Jenkins Project Jenkins vulnerability
Jenkins ProjectJenkins
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.3%probability of exploitation in the next 30 days
Higher than 22% of scored CVEs
SeverityCVSS
4.3Medium
Description NVD
Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to enumerate view names of other users' "My Views".
Coverage 1 article · 1 outlet
- Jenkins advisory flags critical deserialization flaw and bugsSecurityOnline · first in our coverage · mentions it in passing