Question 1

What is CVE-2026-117623 — CVE-2026-117623?

Accepted Answer

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission.

Question 2

What is the authoritative source for CVE-2026-117623?

Accepted Answer

CVE-2026-117623 (CVE-2026-117623) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-117623CVE-2026-117623

Description

Scoring