CVE-2026-57296 · Brief

CVEs like CVE-2026-57296

The records whose text reads closest to CVE-2026-57296, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-704280.820
   Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

2. CVE-2021-216830.796
   The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

3. CVE-2015-53220.798
   Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list…

   Same weakness class, CWE-22 (path traversal).

4. CVE-2020-22540.809
   Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

5. CVE-2022-251880.810
   Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

6. CVE-2022-341770.787
   Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

7. CVE-2024-52730.813
   Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

8. CVE-2023-329850.791
   Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

9. CVE-2025-676430.810
   Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path…

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

10. CVE-2026-921370.780
    Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot…

    Same weakness class, CWE-22 (path traversal); same vendor or product family, Jenkins.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.