Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-53436 Open Redirect Vulnerability in Jenkins 2.567 and LTS 2.555.2 via Relative Path Segments https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53436
Post summary
The statement announces an open redirect flaw in Jenkins 2.567 and LTS 2.555.2 tied to relative path segments, providing technical details but no evidence of exploitation or remediation.
CVE-2026-53436 Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative… https://www.cve.org/CVERecord?id=CVE-2026-53436
Post summary
A CVE disclosure notes Jenkins misclassifies relative redirect URLs after login as legitimate, flagging a logical flaw.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jenkins | jenkins | - | - | - |
| App | jenkins | jenkins | - | - | - |