Known vulnerabilities in Jenkins LTS 2.568.1

Vendor: Jenkins
Software: Jenkins LTS
Version: 2.568.1
Software CPE: cpe:2.3:a:jenkins:jenkins_lts:*:*:*:*:*:*:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jenkins LTS version 2.568.1 Jenkins LTS 2.568.1 is affected by 18 vulnerabilities: 3 high, 10 medium, 5 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146944 - Missing Authorization
CVE-2026-84657
CWE-862 Low
No
No
2.568.3 04.09.2026 SB2026090454
#VU146940 - Missing Authorization
CVE-2026-84656
CWE-862 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU146930 - Improper Encoding or Escaping of Output
CVE-2026-84655
CWE-116 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU146917 - External Control of Assumed-Immutable Web Parameter
CVE-2026-84654
CWE-472 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU146906 - Permissions, Privileges, and Access Controls
CVE-2026-84653
CWE-264 Low
No
No
2.568.3 04.09.2026 SB2026090454
#VU146905 - Session Fixation
CVE-2026-84652
CWE-384 High
No
No
2.568.3 04.09.2026 SB2026090454
#VU146904 - Improper Access Control
CVE-2026-84651
CWE-284 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU146903 - Deserialization of Untrusted Data
CVE-2026-84650
CWE-502 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU146901 - Cross-Site Request Forgery (CSRF)
CVE-2026-84649
CWE-352 Low
No
No
2.568.3 04.09.2026 SB2026090454
#VU146888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-84648
CWE-79 Low
No
No
2.568.3 04.09.2026 SB2026090454
#VU146886 - Deserialization of Untrusted Data
CVE-2026-84647
CWE-502 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU146885 - Deserialization of Untrusted Data
CVE-2026-84646
CWE-502 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU146884 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-84645
CWE-94 Medium
No
No
2.568.3 04.09.2026 SB2026090454
#VU141079 - Improper Access Control
CVE-2026-70430
CWE-284 Low
No
No
2.568.2 06.08.2026 SB2026080641
#VU141068 - Improper Handling of Case Sensitivity
CVE-2026-70429
CWE-178 High
No
No
2.568.2 06.08.2026 SB2026080641
#VU141055 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-70428
CWE-22 Medium
No
No
2.568.2 06.08.2026 SB2026080641
#VU141044 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-70427
CWE-59 Medium
No
No
2.568.2 06.08.2026 SB2026080641
#VU141038 - Deserialization of Untrusted Data
CVE-2026-70426
CWE-502 High
No
No
2.568.2 06.08.2026 SB2026080641