Vulnerability-Lookup

CVE-2026-27100 (GCVE-0-2026-27100)

Vulnerability from cvelistv5 – Published: 2026-02-18 14:17 – Updated: 2026-02-18 14:53

Summary

Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-02-18 14:50 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

jenkins mitre root

References

1 reference

URL	Tags
https://www.jenkins.io/security/advisory/2026-02-…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version	CPE status
Jenkins Project	Jenkins	Unaffected: 2.551 , < * (maven) Unaffected: 2.541.2 , < 2.541.* (maven)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27100",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-18T14:50:38.503514Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-18T14:53:33.264Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Jenkins",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.551",
              "versionType": "maven"
            },
            {
              "lessThan": "2.541.*",
              "status": "unaffected",
              "version": "2.541.2",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-18T14:17:44.672Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2026-02-18",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2026-27100",
    "datePublished": "2026-02-18T14:17:44.672Z",
    "dateReserved": "2026-02-17T16:48:49.373Z",
    "dateUpdated": "2026-02-18T14:53:33.264Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-27100",
      "date": "2026-09-14",
      "epss": "0.00333",
      "percentile": "0.2634"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-27100\",\"sourceIdentifier\":\"jenkinsci-cert@googlegroups.com\",\"published\":\"2026-02-18T15:18:43.967\",\"lastModified\":\"2026-06-17T10:26:40.633\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.\"},{\"lang\":\"es\",\"value\":\"Jenkins 2.550 y anteriores, LTS 2.541.1 y anteriores acepta valores de par\u00e1metros de ejecuci\u00f3n que hacen referencia a compilaciones a las que el usuario que env\u00eda la compilaci\u00f3n no tiene acceso, permitiendo a atacantes con permiso de Elemento/Compilaci\u00f3n y Elemento/Configurar obtener informaci\u00f3n sobre la existencia de trabajos, la existencia de compilaciones, y si una compilaci\u00f3n especificada existe, su nombre de visualizaci\u00f3n.\"}],\"affected\":[{\"source\":\"jenkinsci-cert@googlegroups.com\",\"affectedData\":[{\"vendor\":\"Jenkins Project\",\"product\":\"Jenkins\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"2.551\",\"lessThan\":\"*\",\"versionType\":\"maven\",\"status\":\"unaffected\"},{\"version\":\"2.541.2\",\"lessThan\":\"2.541.*\",\"versionType\":\"maven\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-02-18T14:50:38.503514Z\",\"id\":\"CVE-2026-27100\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*\",\"versionEndExcluding\":\"2.541.2\",\"matchCriteriaId\":\"1BA732A2-5EA7-4C70-AF40-4E696689C4F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*\",\"versionEndExcluding\":\"2.551\",\"matchCriteriaId\":\"2D2F2C2E-E436-4367-B067-C8E6CE7ECBD8\"}]}]}],\"references\":[{\"url\":\"https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658\",\"source\":\"jenkinsci-cert@googlegroups.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-06T02:47:49+00:00",
      "cve": "CVE-2026-27100",
      "id": "CVE-2026-27100",
      "initial_release_date": "2026-02-18T14:17:44.672000+00:00",
      "product_status:fixed": "34",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "40",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "org.jenkins-ci.main/jenkins-core: Jenkins: Information disclosure via unauthorized access to build parameters",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27100.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-27100\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-02-18T14:50:38.503514Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-02-18T14:52:48.220Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Jenkins Project\", \"product\": \"Jenkins\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2.551\", \"lessThan\": \"*\", \"versionType\": \"maven\"}, {\"status\": \"unaffected\", \"version\": \"2.541.2\", \"lessThan\": \"2.541.*\", \"versionType\": \"maven\"}], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658\", \"name\": \"Jenkins Security Advisory 2026-02-18\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.\"}], \"providerMetadata\": {\"orgId\": \"39769cd5-e6e2-4dc8-927e-97b3aa056f5b\", \"shortName\": \"jenkins\", \"dateUpdated\": \"2026-02-18T14:17:44.672Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-27100\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-02-18T14:53:33.264Z\", \"dateReserved\": \"2026-02-17T16:48:49.373Z\", \"assignerOrgId\": \"39769cd5-e6e2-4dc8-927e-97b3aa056f5b\", \"datePublished\": \"2026-02-18T14:17:44.672Z\", \"assignerShortName\": \"jenkins\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

bit-jenkins-2026-27100

Vulnerability from bitnami_vulndb

Published

2026-02-20 08:43

Modified

2026-09-08 08:34

Summary

Details

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Bitnami",
        "name": "jenkins",
        "purl": "pkg:bitnami/jenkins"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.483.0"
            },
            {
              "fixed": "2.541.2"
            },
            {
              "introduced": "2.542.0"
            },
            {
              "fixed": "2.551.0"
            }
          ],
          "type": "SEMVER"
        }
      ],
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "type": "CVSS_V3"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-27100"
  ],
  "database_specific": {
    "cpes": [
      "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:maven:*:*"
    ],
    "severity": "Medium"
  },
  "details": "Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.",
  "id": "BIT-jenkins-2026-27100",
  "modified": "2026-09-08T08:34:36.952Z",
  "published": "2026-02-20T08:43:34.823Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27100"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658"
    }
  ],
  "schema_version": "1.6.2"
}

FKIE_CVE-2026-27100

Vulnerability from fkie_nvd - Published: 2026-02-18 15:18 - Updated: 2026-06-17 10:26

Severity

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

References

	URL	Tags
	jenkinsci-cert@googlegroups.com	https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658	Vendor Advisory

Impacted products

	Vendor	Product	Version
	jenkins	jenkins	*
	jenkins	jenkins	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "affected",
          "product": "Jenkins",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.551",
              "versionType": "maven"
            },
            {
              "lessThan": "2.541.*",
              "status": "unaffected",
              "version": "2.541.2",
              "versionType": "maven"
            }
          ]
        }
      ],
      "source": "jenkinsci-cert@googlegroups.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
              "matchCriteriaId": "1BA732A2-5EA7-4C70-AF40-4E696689C4F7",
              "versionEndExcluding": "2.541.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
              "matchCriteriaId": "2D2F2C2E-E436-4367-B067-C8E6CE7ECBD8",
              "versionEndExcluding": "2.551",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name."
    },
    {
      "lang": "es",
      "value": "Jenkins 2.550 y anteriores, LTS 2.541.1 y anteriores acepta valores de par\u00e1metros de ejecuci\u00f3n que hacen referencia a compilaciones a las que el usuario que env\u00eda la compilaci\u00f3n no tiene acceso, permitiendo a atacantes con permiso de Elemento/Compilaci\u00f3n y Elemento/Configurar obtener informaci\u00f3n sobre la existencia de trabajos, la existencia de compilaciones, y si una compilaci\u00f3n especificada existe, su nombre de visualizaci\u00f3n."
    }
  ],
  "id": "CVE-2026-27100",
  "lastModified": "2026-06-17T10:26:40.633",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-27100",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-02-18T14:50:38.503514Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-02-18T15:18:43.967",
  "references": [
    {
      "source": "jenkinsci-cert@googlegroups.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658"
    }
  ],
  "sourceIdentifier": "jenkinsci-cert@googlegroups.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-WFHP-QGM8-5P5C

Vulnerability from github – Published: 2026-02-18 15:31 – Updated: 2026-02-25 20:00

Summary

Jenkins has a build information disclosure vulnerability through Run Parameter

Details

Severity

4.3 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Maven",
        "name": "org.jenkins-ci.main:jenkins-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.542"
            },
            {
              "fixed": "2.551"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Maven",
        "name": "org.jenkins-ci.main:jenkins-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.541.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-27100"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-02-19T20:26:03Z",
    "nvd_published_at": "2026-02-18T15:18:43Z",
    "severity": "MODERATE"
  },
  "details": "Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.",
  "id": "GHSA-wfhp-qgm8-5p5c",
  "modified": "2026-02-25T20:00:47Z",
  "published": "2026-02-18T15:31:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27100"
    },
    {
      "type": "WEB",
      "url": "https://github.com/jenkinsci/jenkins/commit/f92eadb5813f04ca27439455e2573c3171e93a45"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/jenkinsci/jenkins"
    },
    {
      "type": "WEB",
      "url": "https://github.com/jenkinsci/jenkins/releases/tag/jenkins-2.541.2"
    },
    {
      "type": "WEB",
      "url": "https://github.com/jenkinsci/jenkins/releases/tag/jenkins-2.551"
    },
    {
      "type": "WEB",
      "url": "https://www.jenkins.io/security/advisory/2026-02-18/#SECURITY-3658"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Jenkins has a build information disclosure vulnerability through Run Parameter "
}

RHSA-2026:10199

Vulnerability from csaf_redhat - Published: 2026-04-23 16:00 - Updated: 2026-09-14 20:40

Summary

Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.21 security update.

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2026-27100.

CVE-2026-27100

A flaw was found in Jenkins. An attacker with Item/Build and Item/Configure permissions can exploit this vulnerability by submitting Run Parameter values that refer to builds they do not have authorization to access. This allows the attacker to obtain sensitive information, including the existence of jobs, the existence of builds, and the display names of specific builds. This is an information disclosure vulnerability.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fixed: 4 products Known not affected: 4 products

https://access.redhat.com/errata/RHSA-2026:10199

Open the full advisory

RHSA-2026:10201

Vulnerability from csaf_redhat - Published: 2026-04-23 16:39 - Updated: 2026-09-14 20:40

Summary

Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.13 security update.

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2026-27100.

CVE-2026-27100

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fixed: 1 product Known not affected: 4 products

https://access.redhat.com/errata/RHSA-2026:10201

Open the full advisory

RHSA-2026:10204

Vulnerability from csaf_redhat - Published: 2026-04-23 16:56 - Updated: 2026-09-14 20:40

Summary

Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.15 security update.

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2026-27100.

CVE-2026-27100

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fixed: 4 products Known not affected: 4 products

https://access.redhat.com/errata/RHSA-2026:10204

Open the full advisory

RHSA-2026:10205

Vulnerability from csaf_redhat - Published: 2026-04-23 17:06 - Updated: 2026-09-14 20:40

Summary

Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.20 security update.

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2026-27100.

CVE-2026-27100

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fixed: 4 products Known not affected: 4 products

https://access.redhat.com/errata/RHSA-2026:10205

Open the full advisory

RHSA-2026:10206

Vulnerability from csaf_redhat - Published: 2026-04-23 17:15 - Updated: 2026-09-14 20:40

Summary

Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.19 security update.

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2026-27100.

CVE-2026-27100

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fixed: 4 products Known not affected: 4 products

https://access.redhat.com/errata/RHSA-2026:10206

Open the full advisory

RHSA-2026:10209

Vulnerability from csaf_redhat - Published: 2026-04-23 17:20 - Updated: 2026-09-14 20:40

Summary

Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.12 security update.

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2026-27100.

CVE-2026-27100

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fixed: 1 product Known not affected: 4 products

https://access.redhat.com/errata/RHSA-2026:10209

Open the full advisory

RHSA-2026:10211

Vulnerability from csaf_redhat - Published: 2026-04-23 17:21 - Updated: 2026-09-14 20:40

Summary

Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.14 security update.

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2026-27100.

CVE-2026-27100

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fixed: 4 products Known not affected: 4 products

https://access.redhat.com/errata/RHSA-2026:10211

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-27100 (GCVE-0-2026-27100)

Vulnerability from bitnami_vulndb

Tags

Sightings

Nomenclature