CVE-2026-48927
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers a…
Published May 27, 2026 · updated Oct 14, 2026 · jenkins buildgraph-view
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 27, 2026 · NIST NVD
Detected
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
Oct 14, 2026 · NIST NVD
Updated
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
Affected
- cpe jenkins/buildgraph-viewversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-48927
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-48927
30-day exploitation probability 0.3%
first.org - NIST NVDVulnerability recordCVE-2026-48927
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
nvd.nist.gov