A critical Jenkins vulnerability, tracked as SECURITY-3911 and CVE-2026-70426, could allow malicious Jenkins agents or attackers with Agent/Connect permission to execute code on a Jenkins controller. The issue affects Jenkins deployments using vulnerable versions of the Remoting library, which handles serialized object communication between controllers and build agents. The vulnerability carries a Critical CVSS 3.1 […]
The post Critical Jenkins Vulnerability Exposes Build Servers to Controller Takeover appeared first on Cyber Security News.