Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 Jenkins Credentials Binding Plugin, Path Traversal Vulnerability, #CVE-2026-48922 (High) -DC-May2026-2 https://dailycve.com/jenkins-credentials-binding-plugin-path-traversal-vulnerability-cve-2026-48922-high-dc-may2026-2/
Post summary
The post reports a high‑severity Path Traversal flaw (CVE‑2026‑48922) in the Jenkins Credentials Binding Plugin, but provides no additional technical, patch, or exploitation details.
Jenkinsの複数プラグインに脆弱性(CVE-2026-48920,CVE-2026-48921,CVE-2026-48922) https://rocket-boys.co.jp/security-measures-lab/jenkins-plugins-vulnerabilities-cve-2026-48920-48921-48922/ #セキュリティ対策Lab #security #securitynews
Post summary
The post references a blog link discussing multiple Jenkins plugin vulnerabilities (CVE-2026-48920, 2026-48921, 2026-48922) but offers no additional technical or operational details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jenkins | credentials_binding | - | jenkins | - |