CVE-2026-84649 | Jenkins Project up to 2.446/2.567.x HTTP Endpoint cross-site request forgery

A vulnerability was found in Jenkins Project Jenkins up to 2.446/2.567.x. It has been classified as problematic. The impacted element is an unknown function of the component HTTP Endpoint. The manipulation leads to cross-site request forgery.

This vulnerability is uniquely identified as CVE-2026-84649. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More