CVE-2026-27100 - Jenkins Cross-Site Scripting Vulnerability

CVE ID : CVE-2026-27100 Published : Feb. 18, 2026, 3:18 p.m. | 41 minutes ago Description : Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...