JC
Product
Jenkins CodeSonar Plugin
by Jenkins Project · last CVE Aug 5, 2026
1
CVEs
0
On KEV
4.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Jenkins CodeSonar Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-70446
4.3
0%
Aug 5
Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
Affected: through 3.6.0
Showing 1