CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 34.0%

CVSS Severity

CVSS v3 Score 8.8

References

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3649

Products affected by CVE-2026-57301

Jenkins » Official Owasp Zap » Version: N/A

cpe:2.3:a:jenkins:official_owasp_zap:-
Jenkins » Official Owasp Zap » Version: 1.0.1

cpe:2.3:a:jenkins:official_owasp_zap:1.0.1
Jenkins » Official Owasp Zap » Version: 1.0.2

cpe:2.3:a:jenkins:official_owasp_zap:1.0.2
Jenkins » Official Owasp Zap » Version: 1.0.3

cpe:2.3:a:jenkins:official_owasp_zap:1.0.3
Jenkins » Official Owasp Zap » Version: 1.0.4

cpe:2.3:a:jenkins:official_owasp_zap:1.0.4
Jenkins » Official Owasp Zap » Version: 1.0.5

cpe:2.3:a:jenkins:official_owasp_zap:1.0.5
Jenkins » Official Owasp Zap » Version: 1.0.7

cpe:2.3:a:jenkins:official_owasp_zap:1.0.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57301

Products

Pricing

Contact Us