CVE-2026-84653 — Jenkins Project / Jenkins

CVE-2026-84653

Jenkins Project / Jenkins PUBLISHED

Description (CNA)

Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in the Appearance configuration page, allowing attackers with Overall/Manage permission to modify Appearance configuration options they should not have access to.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins	unaffected 2.580 before ; unaffected 0 before 2.421; unaffected 2.568.3 before 2.568.

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3981

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.