Jenkins
Security incidents tagged Jenkins. Newest first.
0 Jenkins incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 386
- Longest quiet run: 408 days (Aug 20–Oct 1)
Show 2 older incidents2 older incidents
October 2025 1
PatchedJenkins: Remote Code Execution Vulnerability
Jenkins
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism. Added to CISA KEV on 2025-10-02.
Open incident →CVE-2017-1000353
January 2024 1
PatchedJenkins CLI arbitrary file read (CVE-2024-23897) leads to RCE
Jenkins Command Line Interface (CLI)
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution. Added to the CISA KEV catalog on 2024-08-19. CISA lists known use in ransomware campaigns.
Open incident →CVE-2024-23897
