Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-117619

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after the API token is revoked or expires.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 12.6%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-117619


Contact Us

Shodan ® - All rights reserved