CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-48920

Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by setting the `data-inline` attribute, without restrictions on the image URLs that can be inlined, allowing attackers able to control the email content to specify `file:` URLs for images to read arbitrary files from the Jenkins controller filesystem.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 63.7%

CVSS Severity

CVSS v3 Score 8.8

References

https://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3705

Products affected by CVE-2026-48920

Jenkins » Email Extension » Version: 1.0

cpe:2.3:a:jenkins:email_extension:1.0
Jenkins » Email Extension » Version: 1.1

cpe:2.3:a:jenkins:email_extension:1.1
Jenkins » Email Extension » Version: 1.2

cpe:2.3:a:jenkins:email_extension:1.2
Jenkins » Email Extension » Version: 1933.v45cec755423f

cpe:2.3:a:jenkins:email_extension:1933.v45cec755423f
Jenkins » Email Extension » Version: 2.0

cpe:2.3:a:jenkins:email_extension:2.0
Jenkins » Email Extension » Version: 2.1

cpe:2.3:a:jenkins:email_extension:2.1
Jenkins » Email Extension » Version: 2.10

cpe:2.3:a:jenkins:email_extension:2.10
Jenkins » Email Extension » Version: 2.11

cpe:2.3:a:jenkins:email_extension:2.11
Jenkins » Email Extension » Version: 2.12

cpe:2.3:a:jenkins:email_extension:2.12
Jenkins » Email Extension » Version: 2.13

cpe:2.3:a:jenkins:email_extension:2.13
Jenkins » Email Extension » Version: 2.14

cpe:2.3:a:jenkins:email_extension:2.14
Jenkins » Email Extension » Version: 2.14.1

cpe:2.3:a:jenkins:email_extension:2.14.1
Jenkins » Email Extension » Version: 2.15

cpe:2.3:a:jenkins:email_extension:2.15
Jenkins » Email Extension » Version: 2.16

cpe:2.3:a:jenkins:email_extension:2.16
Jenkins » Email Extension » Version: 2.17

cpe:2.3:a:jenkins:email_extension:2.17
Jenkins » Email Extension » Version: 2.18

cpe:2.3:a:jenkins:email_extension:2.18
Jenkins » Email Extension » Version: 2.19

cpe:2.3:a:jenkins:email_extension:2.19
Jenkins » Email Extension » Version: 2.2

cpe:2.3:a:jenkins:email_extension:2.2
Jenkins » Email Extension » Version: 2.2.1

cpe:2.3:a:jenkins:email_extension:2.2.1
Jenkins » Email Extension » Version: 2.20

cpe:2.3:a:jenkins:email_extension:2.20
Jenkins » Email Extension » Version: 2.21

cpe:2.3:a:jenkins:email_extension:2.21
Jenkins » Email Extension » Version: 2.22

cpe:2.3:a:jenkins:email_extension:2.22
Jenkins » Email Extension » Version: 2.24

cpe:2.3:a:jenkins:email_extension:2.24
Jenkins » Email Extension » Version: 2.24.1

cpe:2.3:a:jenkins:email_extension:2.24.1
Jenkins » Email Extension » Version: 2.25

cpe:2.3:a:jenkins:email_extension:2.25
Jenkins » Email Extension » Version: 2.27

cpe:2.3:a:jenkins:email_extension:2.27
Jenkins » Email Extension » Version: 2.27.1

cpe:2.3:a:jenkins:email_extension:2.27.1
Jenkins » Email Extension » Version: 2.28

cpe:2.3:a:jenkins:email_extension:2.28
Jenkins » Email Extension » Version: 2.29

cpe:2.3:a:jenkins:email_extension:2.29
Jenkins » Email Extension » Version: 2.3

cpe:2.3:a:jenkins:email_extension:2.3
Jenkins » Email Extension » Version: 2.30

cpe:2.3:a:jenkins:email_extension:2.30
Jenkins » Email Extension » Version: 2.30.1

cpe:2.3:a:jenkins:email_extension:2.30.1
Jenkins » Email Extension » Version: 2.30.2

cpe:2.3:a:jenkins:email_extension:2.30.2
Jenkins » Email Extension » Version: 2.31

cpe:2.3:a:jenkins:email_extension:2.31
Jenkins » Email Extension » Version: 2.32

cpe:2.3:a:jenkins:email_extension:2.32
Jenkins » Email Extension » Version: 2.33

cpe:2.3:a:jenkins:email_extension:2.33
Jenkins » Email Extension » Version: 2.34

cpe:2.3:a:jenkins:email_extension:2.34
Jenkins » Email Extension » Version: 2.35

cpe:2.3:a:jenkins:email_extension:2.35
Jenkins » Email Extension » Version: 2.35.1

cpe:2.3:a:jenkins:email_extension:2.35.1
Jenkins » Email Extension » Version: 2.36

cpe:2.3:a:jenkins:email_extension:2.36
Jenkins » Email Extension » Version: 2.37

cpe:2.3:a:jenkins:email_extension:2.37
Jenkins » Email Extension » Version: 2.37.1

cpe:2.3:a:jenkins:email_extension:2.37.1
Jenkins » Email Extension » Version: 2.37.2

cpe:2.3:a:jenkins:email_extension:2.37.2
Jenkins » Email Extension » Version: 2.37.2.2

cpe:2.3:a:jenkins:email_extension:2.37.2.2
Jenkins » Email Extension » Version: 2.38

cpe:2.3:a:jenkins:email_extension:2.38
Jenkins » Email Extension » Version: 2.38.1

cpe:2.3:a:jenkins:email_extension:2.38.1
Jenkins » Email Extension » Version: 2.38.2

cpe:2.3:a:jenkins:email_extension:2.38.2
Jenkins » Email Extension » Version: 2.39

cpe:2.3:a:jenkins:email_extension:2.39
Jenkins » Email Extension » Version: 2.39.2

cpe:2.3:a:jenkins:email_extension:2.39.2
Jenkins » Email Extension » Version: 2.39.3

cpe:2.3:a:jenkins:email_extension:2.39.3
Jenkins » Email Extension » Version: 2.4

cpe:2.3:a:jenkins:email_extension:2.4
Jenkins » Email Extension » Version: 2.40

cpe:2.3:a:jenkins:email_extension:2.40
Jenkins » Email Extension » Version: 2.40.1

cpe:2.3:a:jenkins:email_extension:2.40.1
Jenkins » Email Extension » Version: 2.40.2

cpe:2.3:a:jenkins:email_extension:2.40.2
Jenkins » Email Extension » Version: 2.40.3

cpe:2.3:a:jenkins:email_extension:2.40.3
Jenkins » Email Extension » Version: 2.40.4

cpe:2.3:a:jenkins:email_extension:2.40.4
Jenkins » Email Extension » Version: 2.40.5

cpe:2.3:a:jenkins:email_extension:2.40.5
Jenkins » Email Extension » Version: 2.41

cpe:2.3:a:jenkins:email_extension:2.41
Jenkins » Email Extension » Version: 2.41.2

cpe:2.3:a:jenkins:email_extension:2.41.2
Jenkins » Email Extension » Version: 2.41.3

cpe:2.3:a:jenkins:email_extension:2.41.3
Jenkins » Email Extension » Version: 2.42

cpe:2.3:a:jenkins:email_extension:2.42
Jenkins » Email Extension » Version: 2.43

cpe:2.3:a:jenkins:email_extension:2.43
Jenkins » Email Extension » Version: 2.44

cpe:2.3:a:jenkins:email_extension:2.44
Jenkins » Email Extension » Version: 2.45

cpe:2.3:a:jenkins:email_extension:2.45
Jenkins » Email Extension » Version: 2.46

cpe:2.3:a:jenkins:email_extension:2.46
Jenkins » Email Extension » Version: 2.47

cpe:2.3:a:jenkins:email_extension:2.47
Jenkins » Email Extension » Version: 2.48

cpe:2.3:a:jenkins:email_extension:2.48
Jenkins » Email Extension » Version: 2.49

cpe:2.3:a:jenkins:email_extension:2.49
Jenkins » Email Extension » Version: 2.5

cpe:2.3:a:jenkins:email_extension:2.5
Jenkins » Email Extension » Version: 2.50

cpe:2.3:a:jenkins:email_extension:2.50
Jenkins » Email Extension » Version: 2.51

cpe:2.3:a:jenkins:email_extension:2.51
Jenkins » Email Extension » Version: 2.52

cpe:2.3:a:jenkins:email_extension:2.52
Jenkins » Email Extension » Version: 2.53

cpe:2.3:a:jenkins:email_extension:2.53
Jenkins » Email Extension » Version: 2.54

cpe:2.3:a:jenkins:email_extension:2.54
Jenkins » Email Extension » Version: 2.55

cpe:2.3:a:jenkins:email_extension:2.55
Jenkins » Email Extension » Version: 2.56

cpe:2.3:a:jenkins:email_extension:2.56
Jenkins » Email Extension » Version: 2.57

cpe:2.3:a:jenkins:email_extension:2.57
Jenkins » Email Extension » Version: 2.57.1

cpe:2.3:a:jenkins:email_extension:2.57.1
Jenkins » Email Extension » Version: 2.57.2

cpe:2.3:a:jenkins:email_extension:2.57.2
Jenkins » Email Extension » Version: 2.58

cpe:2.3:a:jenkins:email_extension:2.58
Jenkins » Email Extension » Version: 2.59

cpe:2.3:a:jenkins:email_extension:2.59
Jenkins » Email Extension » Version: 2.6

cpe:2.3:a:jenkins:email_extension:2.6
Jenkins » Email Extension » Version: 2.60

cpe:2.3:a:jenkins:email_extension:2.60
Jenkins » Email Extension » Version: 2.61

cpe:2.3:a:jenkins:email_extension:2.61
Jenkins » Email Extension » Version: 2.62

cpe:2.3:a:jenkins:email_extension:2.62
Jenkins » Email Extension » Version: 2.63

cpe:2.3:a:jenkins:email_extension:2.63
Jenkins » Email Extension » Version: 2.64

cpe:2.3:a:jenkins:email_extension:2.64
Jenkins » Email Extension » Version: 2.65

cpe:2.3:a:jenkins:email_extension:2.65
Jenkins » Email Extension » Version: 2.66

cpe:2.3:a:jenkins:email_extension:2.66
Jenkins » Email Extension » Version: 2.67

cpe:2.3:a:jenkins:email_extension:2.67
Jenkins » Email Extension » Version: 2.68

cpe:2.3:a:jenkins:email_extension:2.68
Jenkins » Email Extension » Version: 2.69

cpe:2.3:a:jenkins:email_extension:2.69
Jenkins » Email Extension » Version: 2.7

cpe:2.3:a:jenkins:email_extension:2.7
Jenkins » Email Extension » Version: 2.71

cpe:2.3:a:jenkins:email_extension:2.71
Jenkins » Email Extension » Version: 2.72

cpe:2.3:a:jenkins:email_extension:2.72
Jenkins » Email Extension » Version: 2.73

cpe:2.3:a:jenkins:email_extension:2.73
Jenkins » Email Extension » Version: 2.74

cpe:2.3:a:jenkins:email_extension:2.74
Jenkins » Email Extension » Version: 2.75

cpe:2.3:a:jenkins:email_extension:2.75
Jenkins » Email Extension » Version: 2.76

cpe:2.3:a:jenkins:email_extension:2.76
Jenkins » Email Extension » Version: 2.77

cpe:2.3:a:jenkins:email_extension:2.77
Jenkins » Email Extension » Version: 2.78

cpe:2.3:a:jenkins:email_extension:2.78
Jenkins » Email Extension » Version: 2.79

cpe:2.3:a:jenkins:email_extension:2.79
Jenkins » Email Extension » Version: 2.8

cpe:2.3:a:jenkins:email_extension:2.8
Jenkins » Email Extension » Version: 2.80

cpe:2.3:a:jenkins:email_extension:2.80
Jenkins » Email Extension » Version: 2.81

cpe:2.3:a:jenkins:email_extension:2.81
Jenkins » Email Extension » Version: 2.82

cpe:2.3:a:jenkins:email_extension:2.82
Jenkins » Email Extension » Version: 2.83

cpe:2.3:a:jenkins:email_extension:2.83
Jenkins » Email Extension » Version: 2.84

cpe:2.3:a:jenkins:email_extension:2.84
Jenkins » Email Extension » Version: 2.85

cpe:2.3:a:jenkins:email_extension:2.85
Jenkins » Email Extension » Version: 2.86

cpe:2.3:a:jenkins:email_extension:2.86
Jenkins » Email Extension » Version: 2.87

cpe:2.3:a:jenkins:email_extension:2.87
Jenkins » Email Extension » Version: 2.88

cpe:2.3:a:jenkins:email_extension:2.88
Jenkins » Email Extension » Version: 2.89

cpe:2.3:a:jenkins:email_extension:2.89
Jenkins » Email Extension » Version: 2.89.0.1

cpe:2.3:a:jenkins:email_extension:2.89.0.1
Jenkins » Email Extension » Version: 2.89.1

cpe:2.3:a:jenkins:email_extension:2.89.1
Jenkins » Email Extension » Version: 2.9

cpe:2.3:a:jenkins:email_extension:2.9
Jenkins » Email Extension » Version: 2.90

cpe:2.3:a:jenkins:email_extension:2.90
Jenkins » Email Extension » Version: 2.91

cpe:2.3:a:jenkins:email_extension:2.91
Jenkins » Email Extension » Version: 2.92

cpe:2.3:a:jenkins:email_extension:2.92
Jenkins » Email Extension » Version: 2.93

cpe:2.3:a:jenkins:email_extension:2.93
Jenkins » Email Extension » Version: 2.93.1

cpe:2.3:a:jenkins:email_extension:2.93.1
Jenkins » Email Extension » Version: 2.94

cpe:2.3:a:jenkins:email_extension:2.94

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-48920

Products

Pricing

Contact Us