Question 1

What is CVE-2026-57297 — CVE-2026-57297?

Accepted Answer

A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.

Question 2

What is the authoritative source for CVE-2026-57297?

Accepted Answer

CVE-2026-57297 (CVE-2026-57297) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-57297CVE-2026-57297

Description

Scoring