Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attribute during XStream deserialization.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
Jenkinsに15件の脆弱性、リモートコード実行や管理者アカウント乗っ取りの恐れ 2.588・LTS 2.580.2で修正-CVE-2026-117612~26 https://rocket-boys.co.jp/security-measures-lab/jenkins_15_vulnerabilities_20261028/ #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース
Jenkins fixes 15 vulnerabilities, including remote code execution flaws CVE-2026-117612 and CVE-2026-117614. Upgrade to 2.588 or LTS 2.580.2 now. #Jenkins #CICD #DevSecOps #CVE2026117612 #RCE #XStream #SupplyChainSecurity #PatchNow https://securityonline.info/jenkins-vulnerabilities-october-2026/
Jenkinsに15件の脆弱性、リモートコード実行や管理者アカウント乗っ取りの恐れ 2.588・LTS 2.580.2で修正-CVE-2026-117612~26 https://rocket-boys.co.jp/security-measures-lab/jenkins_15_vulnerabilities_20261028/ イメージキャラクターの Jenkins さんが可愛いんだよな。（何 https://t.co/YR0pTkrreq
Jenkins patched 15 core flaws on Oct 28, among them an XStream deserialization RCE (CVE-2026-117612) and an unauthenticated admin-account race in the setup wizard (CVE-2026-117618); update weekly to 2.588 and LTS to 2.580.2. https://www.jenkins.io/security/advisory/2026-10-28/ #Jenkins https://t.co/9H3pc6AIYg