What’s Vulnerable › Vulnerabilities

CVE-2026-57287

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-24 · updated 2026-10-25
• Weakness: CWE-312

Description

Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers with Extended Read permission to view encrypted secret values that would otherwise be redacted.

Affected products

• Jenkins Project Jenkins Job Configuration History Plugin: through 1356.ve360da_6c523a

References

• https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3742

Get alerted when CVE-2026-57287 or the next vulnerability affects your stack