Question 1

What is CVE-2026-117615 — CVE-2026-117615?

Accepted Answer

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with Item/Create and Item/Configure permission to read arbitrary files on the Jenkins controller file system.

Question 2

What is the authoritative source for CVE-2026-117615?

Accepted Answer

CVE-2026-117615 (CVE-2026-117615) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-117615CVE-2026-117615

Description

Scoring