Jenkins has released a security advisory addressing 20 vulnerabilities across 13 widely deployed plugins, including high-severity flaws that could enable sandbox escapes, arbitrary code execution on Jenkins controllers, credential theft, stored cross-site scripting, and file-system manipulation. The September 16, 2026 advisory places particular emphasis on the Script Security Plugin, which received fixes for eight vulnerabilities. […]
The post Jenkins Fixes 20 Plugin Vulnerabilities Enabling RCE, Sandbox Bypass and Credential Theft appeared first on Cyber Security News.