CVE-2026-53442

score

<0.1

cvss

5.3

epss

0.2%

published

2026-06-10

kev added

—

first seen

2026-10-21

Jenkins <= 2.567 and LTS <= 2.555.2 contains an information disclosure vulnerability caused by unencrypted secrets in POST config.xml submissions stored in job config.xml files, letting users with Item/Extended Read permission or file system access view secrets, exploit requires such permissions or file system access.