CVE-2026-53440

score

<0.1

cvss

4.3

epss

0.4%

published

2026-06-10

kev added

—

first seen

2026-10-21

Jenkins <= 2.567 and LTS <= 2.555.2 contains an open redirect vulnerability caused by unsafe validation of the "from" parameter in the "Delegate to servlet container" security realm, letting attackers perform phishing attacks by redirecting users to attacker-controlled domains, exploit requires user interaction.