CVE-2026-57306

score

<0.1

cvss

4.2

epss

0.2%

published

2026-06-24

kev added

—

first seen

2026-10-21

Jenkins Zowe zDevOps Plugin <= 1.1.3.50.ve350c9b_450b_1 contains a cross-site request forgery caused by lack of proper request validation, letting attackers connect to attacker-specified URLs and capture credentials, exploit requires attacker to trick an authenticated user.