Known vulnerabilities in Stapler

Vendor: Jenkins
Software: Stapler
Software CPE: cpe:2.3:a:jenkins:stapler:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Stapler Stapler is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146917 - External Control of Assumed-Immutable Web Parameter
CVE-2026-84654		 CWE-472 Medium
No
No
 - 04.09.2026 SB2026090454
#VU146901 - Cross-Site Request Forgery (CSRF)
CVE-2026-84649		 CWE-352 Low
No
No
 - 04.09.2026 SB2026090454
#VU146886 - Deserialization of Untrusted Data
CVE-2026-84647		 CWE-502 Medium
No
No
 - 04.09.2026 SB2026090454