{"uuid": "3323393e-d930-4fe4-bd5c-432dacc1b4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53441", "type": "seen", "source": "https://t.me/pphm_HackerNews/1485", "content": "\ud83d\udd34 Jenkins Patches High-Severity Flaws That Could Lead to Server Takeover\n\nJenkins has released security updates addressing seven vulnerabilities, including a high-severity deserialization flaw (CVE-2026-53435) that could allow attackers to impersonate users, read arbitrary files, and potentially execute code through the Script Console. Another high-severity issue (CVE-2026-53441) enables stored XSS attacks, while additional flaws include open redirects, permission bypasses, and exposure of plaintext secrets. Organizations running Jenkins 2.567 or earlier and LTS 2.555.2 or earlier are urged to upgrade immediately.", "creation_timestamp": "2026-07-22T05:00:04.387005Z"}