Multiple CVE's - Jenkins plugins sandbox bypass and file write flaws enable controller JVM code execution and stored XSS - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

CVE-2026-92122, CVE-2026-92123, CVE-2026-92124, CVE-2026-92125, CVE-2026-92137

By Roy Kalfon |

17 September 2026

Multiple CVE’s – Jenkins plugins sandbox bypass and file write flaws enable controller JVM code execution and stored XSS

Jenkins flaws allow bypass of Script Security Plugin sandbox in `