CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57281

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the component that evaluates the script.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 30.6%

CVSS Severity

CVSS v3 Score 7.5

References

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793

Products affected by CVE-2026-57281

Jenkins » Script Security » Version: 1.0

cpe:2.3:a:jenkins:script_security:1.0
Jenkins » Script Security » Version: 1.1

cpe:2.3:a:jenkins:script_security:1.1
Jenkins » Script Security » Version: 1.10

cpe:2.3:a:jenkins:script_security:1.10
Jenkins » Script Security » Version: 1.11

cpe:2.3:a:jenkins:script_security:1.11
Jenkins » Script Security » Version: 1.12

cpe:2.3:a:jenkins:script_security:1.12
Jenkins » Script Security » Version: 1.13

cpe:2.3:a:jenkins:script_security:1.13
Jenkins » Script Security » Version: 1.14

cpe:2.3:a:jenkins:script_security:1.14
Jenkins » Script Security » Version: 1.15

cpe:2.3:a:jenkins:script_security:1.15
Jenkins » Script Security » Version: 1.16

cpe:2.3:a:jenkins:script_security:1.16
Jenkins » Script Security » Version: 1.17

cpe:2.3:a:jenkins:script_security:1.17
Jenkins » Script Security » Version: 1.18

cpe:2.3:a:jenkins:script_security:1.18
Jenkins » Script Security » Version: 1.18.1

cpe:2.3:a:jenkins:script_security:1.18.1
Jenkins » Script Security » Version: 1.19

cpe:2.3:a:jenkins:script_security:1.19
Jenkins » Script Security » Version: 1.2

cpe:2.3:a:jenkins:script_security:1.2
Jenkins » Script Security » Version: 1.20

cpe:2.3:a:jenkins:script_security:1.20
Jenkins » Script Security » Version: 1.21

cpe:2.3:a:jenkins:script_security:1.21
Jenkins » Script Security » Version: 1.22

cpe:2.3:a:jenkins:script_security:1.22
Jenkins » Script Security » Version: 1.23

cpe:2.3:a:jenkins:script_security:1.23
Jenkins » Script Security » Version: 1.24

cpe:2.3:a:jenkins:script_security:1.24
Jenkins » Script Security » Version: 1.25

cpe:2.3:a:jenkins:script_security:1.25
Jenkins » Script Security » Version: 1.26

cpe:2.3:a:jenkins:script_security:1.26
Jenkins » Script Security » Version: 1.27

cpe:2.3:a:jenkins:script_security:1.27
Jenkins » Script Security » Version: 1.28

cpe:2.3:a:jenkins:script_security:1.28
Jenkins » Script Security » Version: 1.29

cpe:2.3:a:jenkins:script_security:1.29
Jenkins » Script Security » Version: 1.29.1

cpe:2.3:a:jenkins:script_security:1.29.1
Jenkins » Script Security » Version: 1.3

cpe:2.3:a:jenkins:script_security:1.3
Jenkins » Script Security » Version: 1.30

cpe:2.3:a:jenkins:script_security:1.30
Jenkins » Script Security » Version: 1.31

cpe:2.3:a:jenkins:script_security:1.31
Jenkins » Script Security » Version: 1.32

cpe:2.3:a:jenkins:script_security:1.32
Jenkins » Script Security » Version: 1.33

cpe:2.3:a:jenkins:script_security:1.33
Jenkins » Script Security » Version: 1.34

cpe:2.3:a:jenkins:script_security:1.34
Jenkins » Script Security » Version: 1.35

cpe:2.3:a:jenkins:script_security:1.35
Jenkins » Script Security » Version: 1.36

cpe:2.3:a:jenkins:script_security:1.36
Jenkins » Script Security » Version: 1.37

cpe:2.3:a:jenkins:script_security:1.37
Jenkins » Script Security » Version: 1.38

cpe:2.3:a:jenkins:script_security:1.38
Jenkins » Script Security » Version: 1.39

cpe:2.3:a:jenkins:script_security:1.39
Jenkins » Script Security » Version: 1.4

cpe:2.3:a:jenkins:script_security:1.4
Jenkins » Script Security » Version: 1.40

cpe:2.3:a:jenkins:script_security:1.40
Jenkins » Script Security » Version: 1.41

cpe:2.3:a:jenkins:script_security:1.41
Jenkins » Script Security » Version: 1.42

cpe:2.3:a:jenkins:script_security:1.42
Jenkins » Script Security » Version: 1.43

cpe:2.3:a:jenkins:script_security:1.43
Jenkins » Script Security » Version: 1.44

cpe:2.3:a:jenkins:script_security:1.44
Jenkins » Script Security » Version: 1.44.1

cpe:2.3:a:jenkins:script_security:1.44.1
Jenkins » Script Security » Version: 1.45

cpe:2.3:a:jenkins:script_security:1.45
Jenkins » Script Security » Version: 1.46

cpe:2.3:a:jenkins:script_security:1.46
Jenkins » Script Security » Version: 1.46.1

cpe:2.3:a:jenkins:script_security:1.46.1
Jenkins » Script Security » Version: 1.47

cpe:2.3:a:jenkins:script_security:1.47
Jenkins » Script Security » Version: 1.48

cpe:2.3:a:jenkins:script_security:1.48
Jenkins » Script Security » Version: 1.49

cpe:2.3:a:jenkins:script_security:1.49
Jenkins » Script Security » Version: 1.5

cpe:2.3:a:jenkins:script_security:1.5
Jenkins » Script Security » Version: 1.50

cpe:2.3:a:jenkins:script_security:1.50
Jenkins » Script Security » Version: 1.51

cpe:2.3:a:jenkins:script_security:1.51
Jenkins » Script Security » Version: 1.52

cpe:2.3:a:jenkins:script_security:1.52
Jenkins » Script Security » Version: 1.53

cpe:2.3:a:jenkins:script_security:1.53
Jenkins » Script Security » Version: 1.54

cpe:2.3:a:jenkins:script_security:1.54
Jenkins » Script Security » Version: 1.54.1

cpe:2.3:a:jenkins:script_security:1.54.1
Jenkins » Script Security » Version: 1.54.2

cpe:2.3:a:jenkins:script_security:1.54.2
Jenkins » Script Security » Version: 1.54.3

cpe:2.3:a:jenkins:script_security:1.54.3
Jenkins » Script Security » Version: 1.54.4

cpe:2.3:a:jenkins:script_security:1.54.4
Jenkins » Script Security » Version: 1.55

cpe:2.3:a:jenkins:script_security:1.55
Jenkins » Script Security » Version: 1.56

cpe:2.3:a:jenkins:script_security:1.56
Jenkins » Script Security » Version: 1.57

cpe:2.3:a:jenkins:script_security:1.57
Jenkins » Script Security » Version: 1.57.1

cpe:2.3:a:jenkins:script_security:1.57.1
Jenkins » Script Security » Version: 1.57.2

cpe:2.3:a:jenkins:script_security:1.57.2
Jenkins » Script Security » Version: 1.57.3

cpe:2.3:a:jenkins:script_security:1.57.3
Jenkins » Script Security » Version: 1.57.4

cpe:2.3:a:jenkins:script_security:1.57.4
Jenkins » Script Security » Version: 1.57.5

cpe:2.3:a:jenkins:script_security:1.57.5
Jenkins » Script Security » Version: 1.57.6

cpe:2.3:a:jenkins:script_security:1.57.6
Jenkins » Script Security » Version: 1.58

cpe:2.3:a:jenkins:script_security:1.58
Jenkins » Script Security » Version: 1.59

cpe:2.3:a:jenkins:script_security:1.59
Jenkins » Script Security » Version: 1.6

cpe:2.3:a:jenkins:script_security:1.6
Jenkins » Script Security » Version: 1.60

cpe:2.3:a:jenkins:script_security:1.60
Jenkins » Script Security » Version: 1.60.1

cpe:2.3:a:jenkins:script_security:1.60.1
Jenkins » Script Security » Version: 1.61

cpe:2.3:a:jenkins:script_security:1.61
Jenkins » Script Security » Version: 1.62

cpe:2.3:a:jenkins:script_security:1.62
Jenkins » Script Security » Version: 1.63

cpe:2.3:a:jenkins:script_security:1.63
Jenkins » Script Security » Version: 1.63.1

cpe:2.3:a:jenkins:script_security:1.63.1
Jenkins » Script Security » Version: 1.64

cpe:2.3:a:jenkins:script_security:1.64
Jenkins » Script Security » Version: 1.65

cpe:2.3:a:jenkins:script_security:1.65
Jenkins » Script Security » Version: 1.66

cpe:2.3:a:jenkins:script_security:1.66
Jenkins » Script Security » Version: 1.66.1

cpe:2.3:a:jenkins:script_security:1.66.1
Jenkins » Script Security » Version: 1.66.2

cpe:2.3:a:jenkins:script_security:1.66.2
Jenkins » Script Security » Version: 1.66.3

cpe:2.3:a:jenkins:script_security:1.66.3
Jenkins » Script Security » Version: 1.66.4

cpe:2.3:a:jenkins:script_security:1.66.4
Jenkins » Script Security » Version: 1.66.5

cpe:2.3:a:jenkins:script_security:1.66.5
Jenkins » Script Security » Version: 1.67

cpe:2.3:a:jenkins:script_security:1.67
Jenkins » Script Security » Version: 1.68

cpe:2.3:a:jenkins:script_security:1.68
Jenkins » Script Security » Version: 1.69

cpe:2.3:a:jenkins:script_security:1.69
Jenkins » Script Security » Version: 1.7

cpe:2.3:a:jenkins:script_security:1.7
Jenkins » Script Security » Version: 1.70

cpe:2.3:a:jenkins:script_security:1.70
Jenkins » Script Security » Version: 1.71

cpe:2.3:a:jenkins:script_security:1.71
Jenkins » Script Security » Version: 1.72

cpe:2.3:a:jenkins:script_security:1.72
Jenkins » Script Security » Version: 1.73

cpe:2.3:a:jenkins:script_security:1.73
Jenkins » Script Security » Version: 1.74

cpe:2.3:a:jenkins:script_security:1.74
Jenkins » Script Security » Version: 1.75

cpe:2.3:a:jenkins:script_security:1.75
Jenkins » Script Security » Version: 1.76

cpe:2.3:a:jenkins:script_security:1.76
Jenkins » Script Security » Version: 1.77

cpe:2.3:a:jenkins:script_security:1.77
Jenkins » Script Security » Version: 1.78

cpe:2.3:a:jenkins:script_security:1.78
Jenkins » Script Security » Version: 1.78.1

cpe:2.3:a:jenkins:script_security:1.78.1
Jenkins » Script Security » Version: 1.8

cpe:2.3:a:jenkins:script_security:1.8
Jenkins » Script Security » Version: 1.9

cpe:2.3:a:jenkins:script_security:1.9
Jenkins » Script Security » Version: 1118.vba21ca2e3286

cpe:2.3:a:jenkins:script_security:1118.vba21ca2e3286
Jenkins » Script Security » Version: 1125.v132f99385e1b_

cpe:2.3:a:jenkins:script_security:1125.v132f99385e1b_
Jenkins » Script Security » Version: 1131.v8b_b_5eda_c328e

cpe:2.3:a:jenkins:script_security:1131.v8b_b_5eda_c328e
Jenkins » Script Security » Version: 1138.v8e727069a_025

cpe:2.3:a:jenkins:script_security:1138.v8e727069a_025
Jenkins » Script Security » Version: 1140.vf967fb_efa_55a_

cpe:2.3:a:jenkins:script_security:1140.vf967fb_efa_55a_
Jenkins » Script Security » Version: 1145.1148.vf6d17a_a_a_eef6

cpe:2.3:a:jenkins:script_security:1145.1148.vf6d17a_a_a_eef6
Jenkins » Script Security » Version: 1145.vb_cf6cf6ed960

cpe:2.3:a:jenkins:script_security:1145.vb_cf6cf6ed960
Jenkins » Script Security » Version: 1146.vdf547f19a_473

cpe:2.3:a:jenkins:script_security:1146.vdf547f19a_473
Jenkins » Script Security » Version: 1158.v7c1b_73a_69a_08

cpe:2.3:a:jenkins:script_security:1158.v7c1b_73a_69a_08
Jenkins » Script Security » Version: 1172.v35f6a_0b_8207e

cpe:2.3:a:jenkins:script_security:1172.v35f6a_0b_8207e
Jenkins » Script Security » Version: 1175.1177.vda_175b_77d144

cpe:2.3:a:jenkins:script_security:1175.1177.vda_175b_77d144
Jenkins » Script Security » Version: 1175.1179.vea_f7532629e1

cpe:2.3:a:jenkins:script_security:1175.1179.vea_f7532629e1
Jenkins » Script Security » Version: 1175.v4b_d517d6db_f0

cpe:2.3:a:jenkins:script_security:1175.v4b_d517d6db_f0
Jenkins » Script Security » Version: 1183.v774b_0b_0a_a_451

cpe:2.3:a:jenkins:script_security:1183.v774b_0b_0a_a_451
Jenkins » Script Security » Version: 1184.v85d16b_d851b_3

cpe:2.3:a:jenkins:script_security:1184.v85d16b_d851b_3
Jenkins » Script Security » Version: 1189.vb_a_b_7c8fd5fde

cpe:2.3:a:jenkins:script_security:1189.vb_a_b_7c8fd5fde
Jenkins » Script Security » Version: 1209.v50b_005db_19db

cpe:2.3:a:jenkins:script_security:1209.v50b_005db_19db
Jenkins » Script Security » Version: 1218.v39ca_7f7ed0a_c

cpe:2.3:a:jenkins:script_security:1218.v39ca_7f7ed0a_c
Jenkins » Script Security » Version: 1228.vd93135a_2fb_25

cpe:2.3:a:jenkins:script_security:1228.vd93135a_2fb_25
Jenkins » Script Security » Version: 1229.v4880b_b_e905a_6

cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6
Jenkins » Script Security » Version: 1335.vf07d9ce377a_e

cpe:2.3:a:jenkins:script_security:1335.vf07d9ce377a_e
Jenkins » Script Security » Version: 1362.1364.v4cf2dc5d8776

cpe:2.3:a:jenkins:script_security:1362.1364.v4cf2dc5d8776
Jenkins » Script Security » Version: 1365.v4778ca_84b_de5

cpe:2.3:a:jenkins:script_security:1365.v4778ca_84b_de5
Jenkins » Script Security » Version: 1366.vd44b_49a_5c85c

cpe:2.3:a:jenkins:script_security:1366.vd44b_49a_5c85c
Jenkins » Script Security » Version: 1367.vdf2fc45f229c

cpe:2.3:a:jenkins:script_security:1367.vdf2fc45f229c
Jenkins » Script Security » Version: 1399.ve6a_66547f6e1

cpe:2.3:a:jenkins:script_security:1399.ve6a_66547f6e1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57281

Products

Pricing

Contact Us