CVE-2026-53437
EUVD-2026-3602110.06.2026, 14:16
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| jenkins | jenkins | 𝑥 < 2.555.3 |
| jenkins | jenkins | 𝑥 < 2.568 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | OpenShift Developer Tools and Services 4.12 | 1786628667 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.13 | 1786628681 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.14 | 1786533561 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.15 | 1786533565 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.16 | 1787125166 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.17 | 1787124635 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.18 | 1787125069 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.19 | 1787124632 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.20 | 1787124925 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.21 | 1787125311 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Developer Tools and Services 4.22 | 1787124779 ≤ 𝑥 < * | ADP |
Common Weakness Enumeration
References