Vulnerability Description
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission.
References
FAQ
What is CVE-2026-117623?
CVE-2026-117623 is a documented vulnerability. Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a stored cross-site scripting (XSS) vulnerabilit...
How severe is CVE-2026-117623?
CVSS scoring is not yet available for CVE-2026-117623. Check NVD for updates.
Is there a patch for CVE-2026-117623?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.