CVE-2026-53435
Deserialization of untrusted data in Jenkins Project
CVSS score
8.8
EPSS probability
%2.2
Risk score
0.2
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
An offensive security researcher + an AI vs. a fresh n-day: building the first public PoC for CVE-2026-53435 in one Friday night. Raw 8h20m log inside.
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2024-23897 Actively exploited
jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE
RH
Partial patch Public Exploits:10EPSS %100
9.0
CVE-2021-45046 Actively exploited
Incomplete fix for Apache Log4j vulnerability
M
Workaround Public Exploits:3EPSS %100
8.8
CVE-2019-1003030 Actively exploited
jenkins-plugin-workflow-cps: Sandbox bypass in Pipeline: Groovy Plugin (SECURITY-1336(2))
RH
Partial patch Public Exploits:4EPSS %97
8.1
CVE-2017-1000353 Actively exploited
jenkins: Unauthenticated remote code execution (SECURITY-429)
RH
No patch (vendor) Public Exploits:3EPSS %100
8.8
CVE-2019-1003029 Actively exploited
jenkins-plugin-script-security: sandbox bypass in script security plugin
RH
Partial patchEPSS %74
9.8
CVE-2024-56325
Apache Pinot Vulnerable to Authentication Bypass
M
Patch status unknown Public Exploits:1EPSS %80
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-53435"