low3.5
CVE-2026-84653
Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in the Appearance confi…
Impact
Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in the Appearance configuration page, allowing attackers with Overall/Manage permission to modify Appearance configuration options they should not have access to.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Jenkins | from 2.421 through 2.579 from 2.426.1 through 2.568.2 |