CVE-2025-67639

score

<0.1

cvss

3.5

epss

0.2%

published

2025-12-10

kev added

—

first seen

2026-10-21

Jenkins <= 2.540 and LTS <= 2.528.2 contains a cross-site request forgery caused by insufficient request validation, letting attackers trick users into logging into attacker-controlled accounts, exploit requires user interaction.