CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-117621 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117620 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117619 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic au… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117618 | NONE | — | In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-117617 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extra… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117616 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by na… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117615 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117614 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent confi… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-117613 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117612 | NONE | — | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to clas… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-116593 | NONE | — | Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its RES… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-115644 | NONE | — | Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API wh… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-114349 | NONE | — | When a broker decodes a compressed record batch, the per-record decoder reads a declared body size f… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-112375 | NONE | — | An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a br… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111551 | NONE | — | Several Kafka deserialization paths read a size or count field from input data and use it directly t… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111496 | NONE | — | Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() compu… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111115 | NONE | — | Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count decla… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111108 | NONE | — | Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111073 | NONE | — | The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-110985 | NONE | — | A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.cla… |
T1190
T1059
+1
|
|
2026-10-28 |