CVE-2026-92126Published
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an arbitrary class, allowing attackers with permission to define and run sandboxed scripts, including P…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-92126 · Microsoft / collected KEV context
cve-program · CVE-2026-92126
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.