Vulnerability Bulletins |
CVE-2026-92136 |
|
| Affected software | JENKINS |
| Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-92136 | |