PT-2026-44033

CVE-2026-9674

Published

2026-05-27

Updated

2026-05-27

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Multijob Plugin versions prior to 662.vd2e0001f6b b d

Description A cross-site request forgery (CSRF) flaw allows attackers to resume failed Multijob builds. CSRF is a type of attack that tricks a victim into submitting a malicious request to a web application where they are currently authenticated.

Recommendations Update the Jenkins Multijob Plugin to a version later than 662.vd2e0001f6b b d.

Exploitability

Fix

Impacts

Researchers

Dyingman1

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

Related identifiers

CVE-2026-9674