CVE lookup

CVE-2026-84647

Pruva has a verified reproduction for CVE-2026-84647: Jenkins Stapler form binding instantiates arbitrary config types → RCE (SECURITY-3966). The canonical evidence record is REPRO-2026-00349.

REPRO

REPRO-2026-00349

Package

jenkinsci/jenkins · github

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents NVD source