PULSE
LIVE64signals / 24h
FEED
← All CVEs
CVE WatchAug 5, 2026

CVE-2026-70438

A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to

CVSS

No CVSS

EPSS

KEV

Exploit Today

0-100

Published: Aug 5, 2026 · Last modified: Aug 5, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Official references
Related CVEs

No related CVEs by CWE or product.