Remote code execution inside Chrome's sandbox is achievable via a use-after-free in WebRTC, triggered when a victim visits a specially crafted HTML page. Affected versions are all Chrome releases prior to 152.0.7977.75 across desktop platforms. No public exploit code or CISA KEV listing has been identified at time of analysis, though the sandboxed execution boundary limits the practical impact compared to the raw CVSS 8.8 score - Google's own Chromium severity rating of 'Medium' reflects this containment.
Improper handling of exceptional conditions (CWE-703) in Cisco IOS XR Software allows an authenticated, remote attacker with low-privilege credentials to achieve high-impact compromise of confidentiality, integrity, and availability. The vulnerabilities were discovered internally by Cisco's security engineering team during a proactive review and are addressed in a software hardening release. No public exploit or active exploitation has been identified at time of analysis, but the CVSS 8.8 score and full C:H/I:H/A:H impact profile make this a significant risk for service-provider and enterprise core-network operators running affected IOS XR releases.
Authentication bypass in the Jenkins SAML Plugin (all versions through 4.618.v441a_27fa_46d2) allows any authenticated low-privilege user to overwrite the SAML identity provider metadata file via unrestricted Stapler data binding, replacing it with attacker-controlled content. Once the IdP metadata is replaced, the attacker operates their own SAML authority and can issue assertions claiming any Jenkins user identity - including administrator - granting full platform compromise. No active exploitation is confirmed (not in CISA KEV), and no public POC has been identified at time of analysis.
Privilege escalation in Jenkins Microsoft Entra ID Plugin (≤710.v0b_ff8e9cc2d2) allows any Entra tenant member with group-creation rights to inherit Jenkins permissions configured for a privileged group by creating a new Entra group whose display name collides with a privileged group's display name. The plugin incorrectly resolves group identity using both the immutable object ID and the mutable, user-controllable display name, so the collision satisfies the authorization check without the attacker belonging to the legitimate privileged group. No public exploit has been identified and CISA has not listed this in KEV, but exploitation requires only a valid Entra account, making it a meaningful insider or tenant-level escalation path into CI/CD infrastructure.
Remote code execution within the browser sandbox is possible in Google Chrome versions prior to 152.0.7977.75 due to a use-of-uninitialized-resource flaw (CWE-908) in the V8 JavaScript engine. An attacker can trigger the vulnerability by luring a user to a crafted HTML page, with no authentication or special privileges required beyond normal web browsing. Google has released the patched build 152.0.7977.75; SSVC rates exploitation status as none and no CISA KEV listing has been identified at time of analysis.
Use-after-free in Chrome's TabStrip component enables remote code execution outside the renderer sandbox in Google Chrome versions prior to 152.0.7977.75. An attacker must social-engineer a user into a specific UI interaction to trigger the memory-corruption primitive, after which arbitrary code executes at browser-process privilege - a full sandbox escape. Google has issued a stable channel patch; no public exploit or CISA KEV listing has been identified at time of analysis.
Incorrect calculation vulnerabilities (CWE-682) in Cisco IOS XR Software allow an unauthenticated attacker on an adjacent network segment to achieve full confidentiality, integrity, and availability compromise of the affected device, as reflected by the CVSS 8.8 AV:A/PR:N/C:H/I:H/A:H vector. The vulnerabilities were discovered through an internal Cisco engineering security review and addressed in a software hardening release; no external exploitation has been reported. Given that IOS XR underpins carrier-grade routers and service-provider backbone infrastructure, successful exploitation could be highly disruptive to network operations.
CSRF token leakage in Jenkins allows an attacker who controls any same-origin page on the Jenkins controller to silently steal a valid CSRF crumb from an authenticated user's session and forge privileged requests on their behalf. The vulnerability spans Jenkins 2.447-2.579 (weekly) and LTS 2.452.1-2.568.2 via the bundled Stapler web framework, which embeds the session crumb as a plaintext string literal inside dynamically generated JavaScript responses. No public exploit or CISA KEV listing is present at time of analysis, but successful exploitation yields full account-level action forgery against any authenticated victim who visits the attacker-controlled page.
Shortcode injection in the Brave WordPress plugin before 0.8.8 allows unauthenticated remote attackers to execute arbitrary WordPress shortcodes server-side by passing crafted values through URL parameters designed for pre-filling form fields. The exploitable shortcodes and their consequences depend entirely on which shortcodes are registered on the target installation - ranging from information disclosure to, in worst-case scenarios involving code-execution shortcodes, elevated impact. A publicly available proof-of-concept exists per WPScan; no active exploitation (KEV) has been confirmed. The CVSS score of 4.8 with AC:H reflects that real-world impact is highly site-dependent.
Cross-site request forgery in the Simply Schedule Appointments WordPress plugin (versions ≤ 1.6.12.23) enables an unauthenticated remote attacker to perform arbitrary privileged actions on behalf of a logged-in WordPress administrator. By luring an authenticated admin into loading a malicious web page or clicking a crafted link, the attacker's forged request is executed with the victim's full session privileges - potentially manipulating appointment data, customer records, and plugin configuration. No public exploit code or active exploitation has been identified at time of analysis, and the vulnerability is reported by Patchstack.
Cross-Site Request Forgery in the Mang Board WP WordPress plugin (versions ≤ 2.3.8) allows a remote unauthenticated attacker to perform unauthorized admin-level actions by tricking an authenticated site administrator into visiting a malicious page. Because the plugin's state-changing endpoints lack WordPress nonce verification, the victim's browser automatically submits forged requests using the administrator's active session, yielding high confidentiality, integrity, and availability impact over plugin-managed board content. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at the time of analysis.
PHP Object Injection in the WP User Frontend WordPress plugin (versions ≤ 4.3.10) allows any subscriber-level authenticated attacker to submit crafted serialized PHP payloads over the network, triggering unsafe deserialization. If a usable gadget chain exists among the site's installed plugins or themes - common in the broad WordPress ecosystem - this can escalate to arbitrary code execution, file write, or full site compromise. Reported by Patchstack; no public exploit code or CISA KEV listing identified at time of analysis.
Out-of-bounds read in ION-DTN's decodeSdnv() function before version 4.2.0 allows unauthenticated remote attackers to trigger reads up to nine bytes past buffer boundaries by sending a UDP datagram with a truncated SDNV to the LTP link service input port. The unbounded design of the original function - which consumed octets until finding one with a clear high-order bit - made it exploitable whenever all bytes in a truncated input retained the high-order bit set, simultaneously causing byte counter underflow. No public exploit has been identified at time of analysis; a vendor-released patch is available as ION-DTN 4.2.0.
Authenticated command injection in Coolify before 4.2.0 allows low-privileged platform users to execute arbitrary OS commands on managed server hosts by embedding shell metacharacters into Docker environment variable key names. The flaw bypasses container isolation entirely - injected payloads travel over SSH as part of Coolify-generated Docker commands and execute in the host OS context, not within any container sandbox. The upstream fix in v4.2.0, confirmed by GitHub release tag and patch commit b50839d4515b115b7ded5db609471440249995da, adds validation constraints in ValidationPatterns.php to reject malformed key names before command construction.
Path traversal in facefusion's HTTP job management API allows unauthenticated remote attackers to write files at arbitrary server locations, escaping the intended jobs directory sandbox. Versions through 3.6.1 are affected; the root cause is failure to normalize job identifiers in get_job_file_name before constructing file paths. A patched release (3.7.0) is available, and the vulnerability is corroborated by a VulnCheck advisory and an independent researcher writeup, though no active exploitation has been confirmed via CISA KEV.
Uncontrolled recursion in Amazon Ion-C before v1.1.6 allows a remote unauthenticated attacker to crash any application that parses untrusted Ion data using this library, causing a denial of service via native call stack exhaustion. The fix, released in v1.1.6 and titled 'Harden container depth,' confirms the root cause is missing or insufficient depth limiting on nested Ion container parsing. No authentication is required and no special configuration is needed beyond the application accepting Ion input from untrusted sources. No public exploit code has been identified at time of analysis.
NULL pointer dereference in NGINX JavaScript (njs) crashes NGINX worker processes when an njs script calls ngx.fetch() against a server that returns a malformed HTTP response and subsequently reads Response.statusText on the result. All versions of F5's NGINX JavaScript module are listed as affected per the wildcard CPE, and the impact is confined entirely to the data plane - worker availability - with no control-plane, confidentiality, or integrity exposure. No public exploit code exists and the CVE is not listed in CISA KEV at time of analysis, but the network-accessible path and zero-privilege requirement make this a credible service-disruption risk for any NGINX deployment using njs-based outbound HTTP fetching.
Privilege escalation in FeatherPanel before v1.3.7.10 permits any authenticated subuser to rewrite their own permission record via the `SubuserController::updateSubuser` handler, immediately gaining full server control. The root cause (CWE-862 Missing Authorization) is confirmed by the fix commit, which adds `USER_UPDATE` permission enforcement, a self-modification block, and whitelist validation of permission names - none of which existed in the vulnerable code path. No public exploit code has been independently confirmed, but the VulnCheck advisory and commit diff together provide sufficient technical detail to reconstruct the attack.
Improper authorization in Craft CMS 5.x allows any authenticated control panel user to change their own password without supplying the current credential or holding an elevated session, and allows users holding the `Edit users` permission to reset other users' passwords - including administrator accounts - enabling full account takeover. The flaw exists in the `elements/save` action, where the `UserPasswordValidator` mass-assigns the `newPassword` field outside of any scenario restriction, bypassing the dedicated `users/set-password` action that enforces elevated session checks. No active exploitation is confirmed (not in CISA KEV); vendor-released patch is available in version 5.10.8.
GraphQL mutation resolvers in Craft CMS allow a token-authenticated user scoped to Site A to create, modify, or delete content entries in any other site (Site B, Site C, etc.) within the same multi-site installation. The saveEntry and deleteEntry resolvers read siteId directly from user-controlled $arguments without invoking ArgumentManager::prepareArguments(), which performs the critical array_intersect check against the GraphQL schema's allowed-sites list. Query resolvers call prepareArguments() correctly and thus enforce site boundaries, making this a mutation-specific authorization bypass. Craft CMS 5.10.11 ships the fix via the new MutationResolver::requireAllowedSite() guard; no public exploit or CISA KEV listing has been identified at time of analysis.
Annotation injection in F5 NGINX Ingress Controller allows any authenticated Kubernetes principal with write access to Ingress resources to embed arbitrary NGINX configuration directives through unsanitized annotation fields. The configuration generator passes multiple user-controllable annotation values directly into the generated nginx.conf without sanitization, enabling an attacker to inject directives that create or delete files, disable services, or manipulate NGINX routing behavior. Impact is confined to the Kubernetes control plane; the NGINX data plane itself is not directly reachable through this vulnerability.
Privilege escalation in F5 BIG-IP and BIG-IQ allows any authenticated user - regardless of assigned role - to create administrative accounts on the device by sending an undisclosed request to the Traffic Management User Interface (TMUI). The flaw is a control-plane-only issue (no data-plane exposure) but grants a low-privileged attacker full administrative authority over the BIG-IP management plane, including traffic policy, certificate management, and device configuration. No public exploit code and no CISA KEV listing have been identified at time of analysis; however, the low attack complexity and broad affected version scope make this a high-priority patching target for any organization running BIG-IP.
Privilege escalation in Craft CMS before 5.10.11 allows authenticated non-admin users holding the administrateUsers permission to perform a full control-panel takeover by minting valid password reset URLs for administrator accounts. The actionGetPasswordResetUrl endpoint omits a check that the caller holds admin status, and the downstream actionSetPassword endpoint validates only the cryptographic verification code without inspecting the caller's session - meaning any valid reset token is redeemable regardless of who requested it. No public exploit or KEV listing exists at time of analysis, but the attack is mechanically straightforward for any user who has been delegated the administrateUsers permission.
Cross-site authorization bypass in Craft CMS before 5.10.11 allows authenticated GraphQL API token holders to escape their assigned site scope and read, modify, or delete content entries belonging to sites they are not authorized to access. The flaw exists in GraphQL entry mutation resolvers, where ArgumentManager::prepareArguments() accepts a caller-supplied siteId argument without verifying the token's authorization against the requested site. The vendor-released patch at 5.10.11 addresses the issue; no active exploitation or public exploit code has been identified at time of analysis.
Unauthenticated access to the internal organization loadOrSearch endpoint in APITable through 1.13.0-beta.1 exposes complete workspace member directories-including names, email addresses, and team hierarchy-to any remote attacker who possesses a valid space identifier. Space identifiers are trivially obtainable from shared links or public templates, making this effectively a zero-prerequisite information disclosure against any APITable deployment with sharing enabled. No public exploit code or active exploitation has been identified at time of analysis, but the attack requires only standard HTTP tooling and no credentials.
SQL injection in Baserow 2.3.3's index() formula function allows low-privileged authenticated users to supply an undocumented fourth argument that is interpolated directly into a PostgreSQL expression without sanitization. Because formula recalculation runs through Baserow's shared database connection, injected SQL executes with the Baserow PostgreSQL role's privileges - bypassing application-layer access controls and granting read and write access to all database contents reachable by that role. Reported by Fluid Attacks; no public exploit code or CISA KEV active exploitation listing exists at time of analysis.
Remote unauthenticated denial-of-service conditions in Cisco IOS XR Software stem from multiple insufficient control flow management flaws (CWE-691) discovered during an internal Cisco security hardening review. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) indicates network-accessible, zero-friction exploitation with scope change, meaning the availability impact can propagate beyond the directly targeted device to affect connected or dependent network infrastructure. No active exploitation has been identified and no public proof-of-concept exists at time of analysis; Cisco has proactively released software hardening builds addressing these issues.
Configuration injection in NGINX Gateway Fabric allows authenticated Kubernetes users with CRD or Secret write permissions to embed arbitrary NGINX directives into the generated server configuration. The vulnerability originates in the NGINX configuration generator component, which renders Authentication Filter fields - clientID, cookieName, and clientSecret - directly into configuration templates without sanitization. Successful exploitation is limited to the control plane; no data-plane traffic is directly manipulated, but an attacker can introduce directives that compromise confidentiality and integrity of the NGINX Plus configuration. No public exploit has been identified and the issue is not listed in CISA KEV at time of analysis.
Stored XSS in SiYuan before v3.8.2 enables authenticated users with upload access to bypass the asset extension blocklist by using file types such as .xht, .ehtml, .xsl, .xbl, or .rdf that browsers render as executable documents. When a victim opens or previews the malicious asset, embedded JavaScript runs in the SiYuan application context, allowing theft of API tokens and full workspace compromise. No public exploit code or CISA KEV listing has been identified at time of analysis; the fix is available in v3.8.2.
Prototype pollution in the TOON serialization library (all versions prior to 2.3.1) allows unauthenticated remote attackers to corrupt Object.prototype in any Node.js application that decodes attacker-controlled TOON input. The vulnerability spans multiple decode paths - dotted-key expansion via __proto__, plain nested objects, tabular rows, quoted keys, and streaming decode - as well as the encoder's normalization pipeline. Depending on the downstream dependency tree, exploitable outcomes range from reliable denial of service to remote code execution via prototype-pollution gadget chains; no public exploit or active exploitation is confirmed at time of analysis.
Stack-based buffer overflow in the GPU component of Google Chrome on Windows (prior to 152.0.7977.75) enables full sandbox escape and arbitrary code execution on the host operating system. Exploitation is a two-stage chained attack: an attacker must first compromise the renderer process (via a separate vulnerability or exploit), then leverage this GPU flaw to break out of Chrome's sandbox and execute code with elevated host privileges. Google has released a patch in the stable channel update for desktop; no public exploit code or CISA KEV listing has been identified at time of analysis.
Use-after-free in Google Chrome's Browser process prior to version 152.0.7977.75 enables sandbox escape, allowing an attacker who has already compromised the renderer process to execute arbitrary code outside the Chrome sandbox via a crafted HTML page. The CVSS vector (AV:N/AC:H/S:C/C:H/I:H/A:H) reflects both the network-reachable delivery and the scope change from renderer to host-level execution. No public exploit or CISA KEV listing has been identified at time of analysis, but sandbox-escape primitives of this class are highly valued in exploit chains.
Sandbox escape in Google Chrome's TabStrip component (versions prior to 152.0.7977.75) allows a remote attacker who has already achieved renderer process compromise to execute arbitrary code outside the Chrome sandbox via incorrect authorization in tab management IPC. The attack chain requires two conditions to be met simultaneously: a prior renderer exploit and social engineering to deliver a crafted HTML page - placing this firmly in the chained-exploit category despite the high CVSS base score. A vendor-released patch is available in Chrome 152.0.7977.75; no public exploit code or active exploitation has been identified at time of analysis.
Plaintext password disclosure in the Gutentor WordPress page builder plugin (before 4.0.6) allows any authenticated subscriber-level user to retrieve the passwords of password-protected posts via a misconfigured REST API endpoint. The endpoint fails to enforce WordPress's built-in content-access context restrictions, meaning the security model of password-protected posts is completely bypassed for any site user who can authenticate. A publicly available exploit exists per WPScan, and a patched release (4.0.6) is available from the vendor.
Insufficient access control in GamiPress (WordPress plugin before 7.9.9.6) allows any authenticated Subscriber-level user to abuse the video watch-tracking endpoint to award configured gamification points, achievements, and ranks to any WordPress user on the site - including administrators - and to accrue them without limit. The flaw maps to CWE-639 (Authorization Bypass Through User-Controlled Key), where the endpoint accepts a user-controlled target identifier without verifying the requester's authorization to grant rewards to that target. A publicly available proof-of-concept is documented by WPScan, and a vendor patch is available.
Missing order-ownership verification in WC Vendors WordPress plugin before 2.7.2.1 allows any authenticated vendor to manipulate shipment records belonging to other vendors. An attacker with a valid vendor account can submit a front-end shipment status update referencing any order ID regardless of ownership, causing the order to be falsely marked as shipped, an order note to be injected under the victim vendor's identity, and the customer to receive a fraudulent dispatch notification. A publicly available proof-of-concept exists via WPScan; no active exploitation is confirmed in CISA KEV.
Broken object-level authorization in MasterStudy LMS WordPress Plugin before 3.7.46 exposes course sales records of any instructor to any authenticated WordPress user. The plugin's order line-item retrieval endpoint accepts a user-supplied identifier without verifying that the requesting user is the record owner, enabling subscriber-level accounts to enumerate and read other instructors' transaction histories. A publicly available exploit exists per WPScan, and the fix is present in version 3.7.46.
Cross-site request forgery vulnerabilities in JetStyleManager for Gutenberg WordPress plugin (all versions before 1.3.9) allow an unauthenticated attacker to delete or modify custom widget skins by tricking a logged-in Contributor-level (or higher) user into visiting a crafted page or clicking a malicious link. The missing CSRF token (nonce) validation on affected AJAX endpoints means the victim's authenticated browser session is silently weaponized against their own site. A publicly available exploit exists via WPScan and vendor-released patch version 1.3.9 resolves the issue.
CSRF protection is absent on front-end order shipment status actions in the WC Vendors WordPress plugin before version 2.7.2.1, allowing network-based attackers to manipulate a logged-in vendor's order shipment state by inducing them to visit a crafted page. The vulnerability requires no attacker authentication and no special deployment configuration beyond active vendor use of the plugin's front-end dashboard. A publicly available exploit exists via WPScan, though no CISA KEV listing was identified, and the practical impact is bounded to order status modification rather than data breach or site takeover.
Email content injection in the CatalogX WordPress plugin before 6.1.3 allows unauthenticated attackers to permanently plant unsanitized content into product enquiry notification emails delivered to site administrators. The injected payload is stored server-side upon submission of a product enquiry and is included verbatim in the administrator notification email each time any subsequent visitor triggers a new enquiry. A publicly available proof-of-concept exists; no public exploit confirmed as actively exploited per CISA KEV.
Protection mechanism failures in Cisco IOS XR Software allow remote unauthenticated attackers to achieve high availability disruption and limited integrity impact against affected routers. Discovered through Cisco's own internal security audit, this CVE bundles multiple CWE-693 class weaknesses addressed in a coordinated hardening release. No active exploitation has been identified, but the combination of network-reachability, no authentication requirement, and an A:H CVSS impact score makes this a high-priority patch for service-provider and carrier-grade router deployments.
curl and libcurl through version 8.21.0 incorrectly handle domain-scoped cookies for Public Suffix List (PSL) domains, permitting a malicious server to set cookies scoped to a PSL entry rather than rejecting them as standards require. This flaw enables cross-subdomain cookie propagation under shared public suffix registries (e.g., github.io, co.uk), potentially exposing session tokens or enabling session fixation against other services the victim connects to under the same PSL domain. No public exploit code exists and CISA KEV listing is absent; the vulnerability was fixed in curl 8.22.0 released September 2, 2026.
Arbitrary file deletion in the WP File Download WordPress plugin (all versions, by JoomUnited) allows any authenticated subscriber-level user to delete files outside the plugin's intended directory, with trivial escalation to remote code execution by targeting wp-config.php. The vulnerability stems from two AJAX endpoints - file.save and file.delete - that lack both WordPress capability checks and nonce enforcement, permitting the two-stage exploit chain against any authenticated session. No public exploit code has been confirmed at time of analysis, but the Wordfence advisory describes the precise two-request mechanism in sufficient detail to enable rapid weaponization.
Authentication bypass in self-managed Grafana allows a low-privileged, already-authenticated user to be resolved as a different — potentially higher-privileged — user, up to Grafana Administrator, when Auth Proxy authentication is combined with identity caching (sync_ttl greater than zero). The flaw is a cache-key collision: the identity cache concatenated the username and forwarded proxy attributes without a delimiter, so crafted attribute values can produce the same key as a victim's cached entry. Only self-managed Grafana OSS and Enterprise deployments behind an Auth Proxy with caching enabled are affected; Grafana Cloud, default configurations, and instances without Auth Proxy caching are not. No public exploit code or active exploitation has been identified at time of analysis, and EPSS is low (0.34%, 27th percentile) despite the high CVSS base of 8.1.
Remote code execution in Progress Telerik UI for ASP.NET AJAX (prior to v2026.3.812) is achievable by an attacker who has first obtained the application's encryption key material and uses it to forge or tamper with dialog request parameters consumed by the RadEditor file browser component. By manipulating the folder paths the file browser reads from, writes to, and uploads into, the attacker can redirect uploads to a web-accessible directory and plant a malicious ASPX webshell, achieving server-side code execution. No public exploit has been identified at time of analysis, and the prerequisite of key material compromise meaningfully constrains real-world exploitation despite the high CVSS score.
SQL injection in the WPvivid Backup, Migration & Staging WordPress plugin (all versions before 0.9.133) allows authenticated WordPress administrators to inject arbitrary SQL through an unsanitized list of identifiers passed directly to database queries. The CVSS scope change (S:C) indicates injected queries may reach beyond the plugin's own data, potentially touching other schemas on the shared MySQL host. A publicly available proof-of-concept has been disclosed via WPScan, though SSVC reports no confirmed active exploitation; vendor-released patch 0.9.133 is available.
HTTPX2's SOCKS5 proxy implementation omits TLS negotiation for WebSocket Secure (wss://) origins, exposing the full WebSocket session - opening handshake, query parameters, Authorization headers, cookies, and message frames - in plaintext to anyone who can observe or control the proxy path. Affected are applications using Client.websocket() or AsyncClient.websocket() in HTTPX2 versions 2.6.0 through 2.9.1 when routing through a SOCKS5 proxy. An adjacent-network attacker can passively eavesdrop on or actively modify traffic, and can impersonate the WebSocket server due to the missing certificate verification step. No public exploit code has been identified at time of analysis and this CVE does not appear in the CISA KEV catalog.
Sandbox escape in Google Chrome's Chromoting (Chrome Remote Desktop) component on Windows allows a local attacker to execute arbitrary code outside the Chrome sandbox via a crafted local program, affecting all Chrome for Windows versions prior to 152.0.7977.75. The root cause is incorrect authorization (CWE-863) within the Chromoting subsystem, where flawed authorization logic fails to restrict a local program from interacting with Chromoting in a way that crosses the sandbox boundary. Google has released a patched version (152.0.7977.75), and no public exploit has been identified at time of analysis, though the full post-sandbox C:H/I:H/A:H impact warrants prompt remediation.
OS command injection in Nuclio's local Docker platform dashboard allows remote attackers to execute arbitrary shell commands as root inside the dashboard container, which holds the Docker socket, enabling full host compromise. The function namespace value - controllable via the unauthenticated (default 'nop' auth) API - is string-interpolated without quoting into a `docker ps --filter` command executed via `/bin/sh -c`, allowing a double-quote character to break out of the filter token and inject arbitrary commands. The issue is fixed in version 1.17.4, with the patch confirmed via GitHub release tag and PR #4220; no public exploit identified at time of analysis.
Stored cross-site scripting in Jenkins SonarQube Scanner Plugin ≤2.18.3 allows attackers holding Item/Configure permission to inject javascript: scheme URLs into dashboard links the plugin constructs from SonarQube scanner results. The plugin performs no URL-scheme validation, so a malicious javascript: payload persists in the Jenkins UI and executes in any victim's browser that views or interacts with the affected dashboard link. No public exploit or active exploitation has been identified at time of analysis; the Jenkins security team confirmed and published this issue on 2026-09-02.