CVE lookup

CVE-2026-84650

Pruva has a verified reproduction for CVE-2026-84650: Jenkins transient fields deserializable from config.xml → config object overwrite / RCE (SECURITY-3972 companion). The canonical evidence record is REPRO-2026-00369.

REPRO

REPRO-2026-00369

Package

jenkinsci/jenkins · github

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents NVD source