LIVE · cybersecurity feed
Live wire
cve recordhigh

CVE-2026-84675

Published
CVSS7.4
Severityhigh
WeaknessCWE-78
ExploitedNot in CISA KEV

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Description

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-84675

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-84675.