Credentials Binding vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CB

Product

Credentials Binding

by Jenkins · last CVE May 27, 2026

8

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 3Medium 5Low 0

Severity

All severities8 Critical0 High3 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Credentials Binding to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-48922	7.5	0%	May 27	Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide… Affected: before 725.ve52b_2328a_fde
CVE-2026-42520	7.5	0%	Apr 29	Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to… Affected: through 719.v80e905ef14eb
CVE-2025-53650	7.3	0%	Jul 9	Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are… Affected: through 687.689.v1a_f775332fc