Skip to content
Threat Feed
Subscribe

Vendor

Jenkins

3 briefs RSS
medium threat

Suspicious Command Execution via Web Server on Linux

Identifies suspicious command executions via a web server on Linux systems, which may suggest a vulnerability and remote shell access.

Elastic Defend +43 persistence initial-access vulnerability linux
2r 3t
critical threat

Multiple Vulnerabilities in Jenkins Plugins

Multiple vulnerabilities exist in Jenkins Plugins that could allow an attacker to disclose information, manipulate files, conduct cross-site scripting attacks, execute arbitrary code, and bypass security measures.

Jenkins Plugins jenkins vulnerability xss code-execution
3r 4t
medium advisory

Jenkins Security Advisory Addressing Multiple Plugin Vulnerabilities

Jenkins released a security advisory on April 29, 2026, detailing vulnerabilities in Credentials Binding Plugin, GitHub Plugin, GitHub Branch Source Plugin, HTML Publisher Plugin, Matrix Authorization Strategy Plugin, Microsoft Entra ID Plugin, and Script Security Plugin, urging users to apply necessary updates.

Credentials Binding Plugin +6 jenkins vulnerability plugin
2r