CVE-2026-70439EPSS p5.8%

CVE-2026-70439CVE-2026-70439

Description

Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality.

Scoring

CVSS 6.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS0.16% probability of exploitation · percentile 5.8% · 2026-08-06T12:00:30Z
Last modified2026-08-05
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.