CVE Watch5 ago 2026

CVE-2026-70435

A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an a

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 5 ago 2026 · Última mod.: 5 ago 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Referencias oficiales

www.jenkins.iohttps://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3888

CVEs relacionados

Sin CVEs relacionados por CWE o producto.