Insecure credential storage in UpSignOn for Windows (before 7.19.0) exposes the biometric unlock key from the Windows PasswordVault API to any standard process running in the same user session, requiring no authentication prompt. An attacker with low-privilege local code execution can retrieve this key, decrypt the protected vault files on disk, and export the entire password manager contents in cleartext. No public exploit has been identified at time of analysis, and the vendor-released patch is available in version 7.19.0.
Cleartext vault data in UpSignOn for Windows before 7.19.0 persists in process memory after the application locks, exposing all stored secrets to any local attacker with standard user privileges. Using the Windows PROCESS_VM_READ permission, an attacker can call ReadProcessMemory() against UpSignOn.exe and extract entry names, URLs, usernames, passwords, TOTP secrets, and notes in plaintext - defeating the lock screen's security guarantee. No public exploit code is identified at time of analysis and no CISA KEV listing exists, but the technique is well within the reach of any attacker with local access to the workstation.
Sensitive key retention in UpSignOn for Windows before 7.19.0 allows a local attacker with low privileges to recover the master password and decrypt the entire password vault. The backup key used to protect an encrypted master password backup is retained in the memory of UpSignOn.exe even after the vault is re-locked, enabling an attacker who can read process memory to extract it, decrypt the master password backup stored in v6-vault1.DATA.txt, and subsequently export all stored credentials in cleartext. No public exploit has been identified at time of analysis, but the attack chain is mechanically straightforward once local access is established.
SAML assertion replay in Grafana Enterprise allows an attacker who obtains a valid signed SAML response to authenticate as the victim user without re-authenticating. When the non-default `allow_idp_initiated` setting is enabled, the SAML library globally suppresses InResponseTo field validation - a field that normally binds each response to a specific originating request - across all SAML flows, including SP-initiated ones that should still enforce it. This anti-replay failure is limited to Grafana Enterprise with an explicit opt-in configuration change; Grafana OSS is unaffected. No public exploit code has been identified and the vulnerability is not in CISA KEV.
Server-Side Request Forgery with full response exfiltration in Open edX Platform's Studio CMS video download endpoint allows authenticated course staff to pivot from the application server into internal networks. A course staff user submits an attacker-controlled URL in the `files[].url` parameter; the CMS backend unconditionally fetches the target via `requests.get(url, allow_redirects=True)` and packages the raw response bytes into a ZIP returned to the caller. Redirect chaining is enabled and no timeout is enforced on the fetch path, enabling blind SSRF amplification and potential cloud-metadata credential theft. No public exploit or active exploitation has been identified at time of analysis. The fix, committed at 00b7c3c, restricts fetches to URL allowlisted from the course's own VAL-registered video encodings.
Uncontrolled memory consumption in Grafana's SQL macro evaluator allows authenticated users with query permissions to crash the Grafana server process via a bypass of the prior CVE-2026-33375 fix. By injecting the timeGroup macro into a WHERE clause rather than the positions blocked by the original regex-based patch, attackers cause the macro evaluator to consume unbounded memory, terminating the server. Microsoft SQL Server, PostgreSQL, and MySQL data source integrations are all confirmed affected, and no public exploit has been identified at time of analysis.
Credential exfiltration via SSRF in LiteLLM proxy (AI Gateway) prior to versions 1.88.6 and 1.96.2 allows any authenticated proxy user to redirect outbound LLM provider calls to an attacker-controlled endpoint, causing the proxy to transmit its operator-configured API keys and other secrets to that destination. Vulnerable routing parameters - api_base, base_url, model_list, fallbacks, and litellm_credential_name - could be injected through nested request fields, path values, and bracket-notation form data that incomplete validation across five proxy modules failed to intercept. No public exploit code has been identified at time of analysis; vendor-released patches are confirmed at versions 1.88.6 and 1.96.2.
Memory exhaustion denial of service in Filebeat's HTTP ingestion endpoint allows an authenticated low-privileged attacker to crash the Filebeat process by sending specially crafted compressed payloads that trigger unbounded decompression (a decompression-bomb / zip-bomb pattern). Affected versions span the 8.x and 9.x branches, with patched releases 8.19.18 and 9.3.1 published under Elastic Security Advisory ESA-2026-165. No public exploit code or CISA KEV listing has been identified at time of analysis, and exploitation is constrained to attackers who can reach the HTTP input endpoint.
Sensitive token logging in Boruta Server before 0.10.0 allows any party with read access to business event logs - including log aggregation systems and the built-in administration log viewer - to recover live OAuth 2.0 and OpenID Connect credentials. Exposed values include access tokens, refresh tokens, authorization codes, agent tokens, direct-post codes, ID tokens, and VP tokens logged during normal authorization and token issuance flows. An attacker who recovers these credentials can impersonate users or clients on any resource server that trusts the stolen tokens until expiration or explicit revocation. No public exploit or active exploitation has been identified.
Information leakage via the MediaCapture component in Google Chrome prior to 152.0.7977.75 enables a remote attacker to exfiltrate sensitive browser-side data by directing a user to a specially crafted HTML page. The flaw (CWE-200) resides in Chrome's implementation of the W3C Media Capture API, which handles camera, microphone, and display-capture device access, and may expose captured media content or associated metadata beyond the intended same-origin boundary. Google has released a fix in the 152.0.7977.75 stable channel update; no public exploit has been identified at time of analysis.
Incorrect authorization in Chrome's Autofill component on Android (prior to 152.0.7977.75) exposes sensitive Autofill-stored data - potentially including saved credentials, addresses, or payment details - to a remote attacker who can socially engineer a victim into visiting a crafted HTML page. The flaw is platform-specific to Chrome on Android and requires active user interaction via social engineering, which limits real-world exploitation friction somewhat. Google has released a patch and no public exploit code has been identified at time of analysis.
Incorrect authorization in Chrome's SiteSettings component (versions prior to 152.0.7977.75) allows an unauthenticated remote attacker to bypass system-level site access restrictions via a crafted HTML page. The attack requires user interaction - the victim must visit the attacker-controlled page - and the primary impact is a high-integrity authorization bypass, potentially allowing a malicious page to access system resources (e.g., geolocation, camera) that should be gated behind permission prompts. No public exploit code or CISA KEV listing exists at time of analysis, and the EPSS score of 0.17% reflects low near-term exploitation probability despite Chrome's massive global deployment footprint.
Stored cross-site scripting in the Gallery PhotoBlocks WordPress plugin (versions <= 1.3.4) allows authenticated contributors to inject malicious scripts into gallery content, which execute in the browsers of higher-privileged users such as editors or administrators who view the affected content. The scope change (S:C in the CVSS vector) reflects the cross-context impact: attacker-controlled script runs in the victim's authenticated session, enabling session hijacking, credential theft, or unauthorized administrative actions. No public exploit code has been identified at time of analysis, and no KEV listing was found.
Origin policy bypass in Google Chrome's Omnibox (address bar) prior to version 152.0.7977.75 allows remote attackers using social engineering and crafted network traffic to circumvent the web same-origin policy, enabling high-integrity cross-origin manipulation. The CVSS vector confirms user interaction is required, meaning the attack cannot be fully automated and depends on deceiving the victim. No public exploit code or active exploitation has been identified; EPSS of 0.16% (5th percentile) reflects low near-term exploitation probability.
Kibana's request processing layer fails to enforce memory allocation limits, allowing any authenticated low-privilege user to trigger unbounded heap consumption and deny service to all users of the instance. Elastic's advisory ESA-2026-163 discloses the issue across all Kibana branches and releases fixes in versions 8.19.16, 9.3.5, and 9.4.2. No public exploit code or active exploitation has been identified at time of analysis.
Path traversal in Kibana's Fleet feature enables a low-privileged user with Fleet write access to craft resource paths that redirect a subsequent administrative delete operation onto unintended internal Kibana resources, causing unauthorized data destruction. Affected versions are Kibana prior to 8.19.18 and 9.4.3; Elastic released fixes for both branches under ESA-2026-157. No public exploit code or active exploitation has been identified at time of analysis, but the two-actor attack pattern (attacker plants, admin triggers) meaningfully constrains real-world exploitability.
Stored cross-site scripting in WCFM Marketplace (WordPress WooCommerce multivendor plugin) through version 3.8.2 allows authenticated contributors to inject persistent malicious JavaScript into marketplace content. When a higher-privileged user such as a site administrator or shop manager views the injected content, the payload executes within their browser session - enabling session hijacking, credential theft, or administrative actions performed on the attacker's behalf via the scope change. Reported by Patchstack; no public exploit code or active exploitation has been identified.
Broken access control in WP Event Solution WordPress plugin (versions <= 4.1.22) exposes unauthenticated network attackers to unauthorized actions against event management functionality, resulting in partial integrity and availability impact. The CVSS vector (PR:N/UI:N/AC:L) confirms this is trivially exploitable by any internet-reachable attacker with no authentication or user interaction required. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the low barrier to exploitation warrants prompt patching on public-facing WordPress installations.
Stored Cross-Site Scripting in the Easy Waveform Player WordPress plugin (≤1.2.2) allows authenticated Contributor-level users to inject arbitrary JavaScript via the shortcode_easywaveformplayer() function due to missing input sanitization and output escaping. The payload persists server-side and executes in every visitor's browser upon page load, with scope change enabling cross-origin script execution. No public exploit or CISA KEV listing has been identified at time of analysis; a patch commit (changeset 3674516) is visible in the WordPress plugin SVN repository.
Account takeover in Keycloak's first-broker-login flow allows a network attacker with their own account on a social identity provider to hijack a victim's active account-linking session and bind their own social identity to the victim's local Keycloak profile. The verification proof generated during the social IdP linking handshake is not cryptographically bound to the specific upstream identity being verified, enabling a substitution attack that grants the attacker persistent authenticated access to the victim's local account and any downstream SSO-protected services. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog.
Stored XSS in Elegant Themes' Divi WordPress theme (all versions through 4.27.6) allows authenticated attackers with Contributor-level access to inject persistent JavaScript payloads that execute against any visitor of an affected page. The vulnerability chains two compounding flaws: the save-time sanitization filter `et_builder_sanitize_dynamic_content_fields()` only recognizes the modern `@ET-DC@...@` marker format, while the rendering engine silently accepts and converts a legacy JSON format, bypassing sanitization entirely; a second flaw in the `post_meta_key` resolver skips `wp_kses_post()` output encoding when `enable_html` is set to `on`, feeding raw `get_post_meta()` output directly into page HTML. A patch was released in version 4.27.7 per the Divi changelog. No public exploit has been identified at time of analysis.
Stored Cross-Site Scripting in Elegant Themes' Divi WordPress theme (all versions through 4.27.6) enables authenticated contributors to plant a `javascript:` URI in the `redirect_url` parameter of the `et_pb_contact_form` shortcode, which executes in any visitor's browser upon contact form submission. The flaw arises from using `esc_attr()` instead of `esc_url()` for sanitization and the parameter's absence from the `$url_options` URL-sanitization array, allowing the raw URI to reach client-side JavaScript that assigns it to `window.location.href`. No public exploit code or CISA KEV listing has been identified at time of analysis, but Divi's enormous deployment footprint makes this a meaningful aggregate risk despite the Contributor access prerequisite.
Agent configuration takeover in Jenkins 2.579 and earlier allows an attacker holding Agent/Configure permission on any single agent to overwrite any other agent's configuration by embedding the target agent's name in a crafted XML document submitted to the REST API or CLI update endpoints. Successful exploitation grants the attacker full control of the victim agent's configuration and exposes its inbound agent secret and environment variables - primitives that enable agent impersonation and lateral movement within the CI/CD infrastructure. No public exploit code or CISA KEV listing has been identified at time of analysis; patches are available as Jenkins 2.580 and LTS 2.568.3.
Out-of-bounds write in Samsung TizenFX's MediaBufferBase component allows a local low-privileged attacker to corrupt memory by supplying unchecked array indices through the Tizen.Multimedia media buffer API. The vulnerable indexer property in `Tizen.Multimedia.Common.Internal.MediaBufferBase` lacked all bounds validation prior to fixes introduced in upstream PRs #7814 and #7815, admitting negative or oversized index values. Under high-complexity conditions, successful exploitation can produce high integrity and availability impact - crashing the multimedia subsystem or enabling controlled memory corruption - on Tizen-based devices such as Samsung Smart TVs and Galaxy Watch wearables. No public exploit exists and no active exploitation has been confirmed.
Path traversal in Kibana's Fleet feature enables a low-privileged user to manipulate Fleet administration actions taken by higher-privileged users, causing those actions to target unintended resources - including deleting accounts with elevated privileges. The attack exploits a confused-deputy pattern (CWE-22/CAPEC-126): the attacker crafts a traversal payload through their low-privileged access, then waits for an admin to perform a routine Fleet operation, at which point the admin's elevated context executes the deletion against the attacker-controlled target. Fixed versions are Kibana 8.19.17, 9.3.6, and 9.4.3 per the Elastic security advisory ESA-2026-159. No public exploit or CISA KEV listing is present at time of analysis.
Stored cross-site scripting in the Drupal Monster Menus contrib module (versions 0.0.0 through 9.5.3) allows malicious script payloads to be persistently injected into navigation or menu rendering contexts, executing in the browsers of subsequent authenticated visitors. The CVSS scope-change flag (S:C) confirms the attack crosses session boundaries, enabling session hijacking, credential theft, or further lateral movement within the Drupal application. No public exploit code has been identified at time of analysis, and Drupal's security team has released an advisory (SA-CONTRIB-2026-116) with a patch.
Stored cross-site scripting in the Drupal Slick Carousel contributed module (all releases before 2.1.0) allows injection of persistent malicious scripts into carousel-rendered content. Any authenticated user or visitor who loads a page containing the compromised carousel triggers script execution in their browser, potentially exposing session tokens and enabling unauthorized actions performed under the victim's identity. The Drupal Security Team has released a patch via sa-contrib-2026-117; no public exploit code or confirmed active exploitation has been identified at time of analysis.
The webhook shared secret stored in Nexus Repository 3's capability configuration is returned unmasked via the capability read API, exposing a sensitive HMAC credential to any account holding the nexus:capabilities:read privilege. Affected versions span 3.2.0 through 3.95.x - a broad exposure window stretching back to an early release - with a confirmed fix in version 3.96.0 published by Sonatype. No public exploit or active exploitation has been identified, but a leaked webhook secret enables downstream abuse including forging authenticated webhook payloads or validating intercepted outbound events targeting CI/CD or pipeline endpoints.
Quadratic CPU exhaustion in HTTPX2's Server-Sent Events parser allows a malicious or compromised SSE endpoint to deny service to Python applications using httpx2.Client.sse() or httpx2.AsyncClient.sse() in versions 2.5.0 through 2.9.x. The _SSELineDecoder.decode() method in _sse.py repeatedly copies and rescans its entire in-memory buffer each time a new chunk arrives for an unterminated line, producing O(n²) processing work proportional to the length of the crafted line. A crafted stream can consume excessive CPU, blocking a synchronous worker thread indefinitely or starving an asynchronous event loop. No public exploit identified at time of analysis; a vendor-released patch is available in version 2.10.0.
Plaintext recovery from S/MIME-encrypted email is possible in Cisco Secure Email due to insufficient message integrity validation during decryption. An unauthenticated remote attacker positioned as a machine-in-the-middle between email gateways can intercept and manipulate ciphertext, exploiting the CWE-345 flaw to extract plaintext content from messages that senders believed were encrypted end-to-end. No public exploit code or CISA KEV listing has been identified at time of analysis, and the AC:H vector reflects the non-trivial MITM positioning requirement.
Plaintext recovery from S/MIME-encrypted email is possible in Cisco Secure Email due to insufficient validation of message integrity during decryption. An unauthenticated remote attacker who achieves a machine-in-the-middle position between email gateways can intercept and manipulate encrypted messages in transit, causing the decryption process to yield recoverable plaintext. No public exploit code or active exploitation has been identified at time of analysis, but confidentiality impact is rated High given complete plaintext disclosure.
Buffer overflow (CWE-119) in the Drupal Gammu SMS Daemon contributed module exposes high-privilege authenticated administrators to memory corruption that yields both confidentiality and integrity compromise. The vulnerability affects all released versions of the module (*.* wildcard CPE), with no patched release confirmed in the provided data. No public exploit code or CISA KEV listing has been identified at time of analysis, and the high attack complexity combined with the requirement for elevated Drupal privileges substantially limits opportunistic exploitation.
Buffer overflow in the Drupal Gammu SMS Daemon contributed module exposes sites to memory corruption with high confidentiality and integrity impact. The vulnerability (CWE-119) requires network-reachable access by a highly privileged user under specific conditions, limiting its practical reach but making it serious when those conditions are met. No public exploit code has been identified at time of analysis, and the Drupal security team has issued advisory SA-contrib-2026-100.
Buffer overflow (CWE-119) in the Drupal Gammu SMS Daemon contributed module allows a highly privileged, authenticated attacker to achieve high confidentiality and integrity impact against affected Drupal installations. The CVSS vector (PR:H, AC:H) constrains real-world exploitability significantly, requiring both administrative access and complex attack conditions. No active exploitation has been identified; all tracked versions of the module are reported as affected with no specific patched release confirmed in available data.
Improper input validation (CWE-20) in the Drupal Link Content Parser contributed module exposes sites to both confidentiality and integrity compromise under high-complexity, high-privilege conditions. All published versions of the module are affected per CPE cpe:2.3:a:drupal:link_content_parser:*:*:*:*:*:*:*:*, with Drupal's security team confirming the issue via advisory SA-contrib-2026-101. No public exploit has been identified at time of analysis, and the CVSS score of 5.9 reflects strong mitigating factors - specifically the requirement for administrator-level authentication and high attack complexity.
HTTP request smuggling in pydantic's HTTPX2 Python client library, all versions prior to 2.11.0, arises because Request._prepare() in _models.py appends a Content-Length header even when a caller-supplied Transfer-Encoding header is already present, producing HTTP/1.1 requests with two conflicting framing headers simultaneously. Downstream intermediaries such as reverse proxies or API gateways that resolve the Content-Length vs. Transfer-Encoding ambiguity differently from the upstream server can misparse request boundaries, enabling request smuggling or connection desynchronization affecting co-located sessions. No public exploit code or active exploitation has been identified at time of analysis; a vendor-released patch is available in v2.11.0.
Uncontrolled memory allocation in sigoden aichat up to version 0.30.4 allows remote unauthenticated attackers to exhaust server memory via the HTTP API endpoint implemented in src/serve.rs, causing a denial-of-service condition. The vulnerability is a CWE-400 resource exhaustion flaw triggered by sending a crafted request body to the aichat serve component. A public proof-of-concept has been published; the vendor did not respond to responsible disclosure, meaning no patch has been released.
Server-Side Request Forgery in the Broken Link Checker WordPress plugin (WPMU Dev, versions ≤ 2.4.14) allows high-privileged authenticated users to coerce the server into issuing arbitrary HTTP requests from its editor component. The CVSS scope-change flag (S:C) indicates the forged requests can reach resources outside the WordPress application boundary, such as cloud instance metadata endpoints or internal network services. No public exploit has been identified at time of analysis.
Uncontrolled recursion in Autodesk Shared Components' IFC file parser allows a denial-of-service condition across multiple Autodesk products when a user opens a maliciously crafted IFC file. The recursive processing of specially structured IFC data causes stack exhaustion, terminating the application unexpectedly. No active exploitation has been confirmed and no public exploit code has been identified at time of analysis; vendor patch is available via Autodesk Security Advisory ADSK-SA-2026-0015.
Missing authorization on a Kibana Entity Store configuration operation allows an authenticated user with elevated Kibana privileges to indirectly coerce a background task into reading Elasticsearch indices the user is not permitted to access directly. The vulnerability - tracked as ESA-2026-147, fixed in Kibana 9.4.5 - is a privilege abuse (CAPEC-122) rather than an authentication bypass: the attacker already holds high Kibana privileges but exploits the missing authz check to escalate their effective read access into restricted Elasticsearch index data. Derived entity records from those unauthorized indices are then surfaced through the Entity Store's output API, completing the information disclosure.
Missing authorization in the Classified Listing WordPress plugin (≤6.1.1) allows authenticated low-privileged users to invoke restricted plugin functionality without the required capability checks. Reported by Patchstack with a CVSS 5.4 medium score, the flaw falls under CWE-862 (Missing Authorization), meaning the plugin fails to verify whether the requesting user holds the appropriate ACL permissions before executing sensitive actions. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
Unauthorized build cancellation in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier allows any authenticated low-privilege user to cancel downstream pipeline builds they should not be able to touch. When a pipeline uses the `waitForBuild` step with the `propagateAbort` parameter enabled, aborting the upstream build propagates a cancel signal to downstream jobs without verifying whether the caller holds the required Item/Cancel permission on those downstream jobs. No public exploit has been identified at time of analysis, and EPSS data was not provided in the input.
Missing Item/Cancel permission enforcement in Jenkins Pipeline: Build Step Plugin ≤599.v4b_67ea_11b_152 allows authenticated low-privilege users to cancel downstream builds they are not authorized to abort. When an upstream pipeline job using the `build` step is canceled, the plugin propagates the cancellation to all triggered downstream jobs without verifying that the build's authentication context holds Item/Cancel permission on those downstream jobs. Jenkins reported this in their 2026-09-02 security advisory (SECURITY-3870); no public exploit code has been identified at time of analysis.
Static field manipulation in Jenkins' Stapler web framework (SECURITY-3926) allows authenticated users who can submit configuration forms to set public static fields on bound configuration objects, causing changes that propagate globally across the entire Jenkins instance and affect all users and build pipelines. Affected releases are Jenkins 2.579 and earlier (weekly) and LTS 2.568.2 and earlier, with fixed versions 2.580 and LTS 2.568.3 released in the 2026-09-02 security advisory. No public exploit code has been identified and the vulnerability does not appear in CISA KEV, but the global-state impact of successful exploitation exceeds what the per-session CVSS 5.4 score alone suggests.
Privilege escalation in Drupal's External Authentication contributed module (versions 0.0.0 through <2.0.13) allows low-privileged network users to gain elevated Drupal permissions by exploiting improper case-sensitivity handling during identity resolution. The module fails to normalize case in username or identity attribute comparisons against existing Drupal accounts, meaning an attacker can present a case-variant identity (e.g., 'Admin' for a privileged 'admin' account) and be mapped to a higher-privileged user. A vendor-released patch is available at version 2.0.13 per Drupal security advisory SA-CONTRIB-2026-098, and no public exploit code has been identified at time of analysis.
Address bar spoofing in Google Chrome on Android prior to version 152.0.7977.75 allows an unauthenticated remote attacker to deceive users about their true browsing origin by triggering fullscreen mode via a crafted HTML page. The flaw (CWE-451: UI Misrepresentation of Critical Information) causes the address bar to be suppressed or misrepresented during fullscreen transitions, creating a reliable phishing surface on Android devices. Google has released a fix in Chrome 152.0.7977.75; no public exploit code has been identified and CISA SSVC rates exploitation as none at time of analysis.
Unauthorized configuration overwrite in Jenkins Job Configuration History Plugin (≤1367.vc8fa_b_15101dc) permits any authenticated low-privilege user to redirect the plugin's audit history storage to an attacker-specified filesystem directory and alter history recording settings via unsanitized Stapler data binding. By controlling the storage path, an attacker can corrupt or suppress configuration change audit trails, or potentially access sensitive directory contents at the redirected path. No public exploit code exists and EPSS stands at 0.15% (4th percentile), indicating low real-world exploitation pressure at this time.
Missing authorization checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier permit any authenticated Jenkins user holding Overall/Read permission to enumerate the IDs of credentials stored in the Jenkins Credentials store. Although credential values (passwords, tokens, certificates) are not directly exposed, the disclosed identifiers constitute reconnaissance data that could guide follow-on attacks against CI/CD pipeline secrets. No public exploit is identified at time of analysis and SSVC rates exploitation as none with partial technical impact.
Stored cross-site scripting in Jenkins update-center2 3.18.3 and earlier allows an attacker who can submit a plugin for hosting to inject malicious script into plugin download index pages by embedding payloads in plugin names, descriptions, or version metadata. Any user who browses the affected plugin index page triggers the XSS payload in their browser session. No exploitation has been confirmed (SSVC: none, no KEV), and no public exploit code has been identified at time of analysis.
Cross-site request forgery in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows unauthenticated remote attackers to delete shared library caches by tricking an authenticated Jenkins user into visiting a malicious page. The impact affects pipeline integrity and build availability, as deleted caches force library re-fetching and can disrupt CI/CD workflows. No public exploit or KEV status has been identified at time of analysis; the vulnerability was disclosed by Jenkins in its September 2, 2026 security advisory (SECURITY-3815).