CVE lookup

CVE-2026-84652

Pruva has a verified reproduction for CVE-2026-84652: Jenkins remember-me session fixation — attacker-plantable cookie value not rotated after login (SECURITY-4069). The canonical evidence record is REPRO-2026-00351.

REPRO

REPRO-2026-00351

Package

jenkinsci/jenkins · github

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents NVD source