Dashboard / CVE-2026-53437

CVE-2026-53437

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-06-10 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
jenkins jenkins < 2.555.3
jenkins jenkins < 2.568

References & Advisories (15)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.47%
Raw Score 0.004690
Percentile 40.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00469
2026-10-28
0.00469

Intelligence Sources

nvd ref →

External Links