CVE-2026-27099

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 20, 2026

Last Seen

February 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Jenkins Vulnerability Exposes Build Environments to XSS Attacks46.6

A critical stored Cross-Site Scripting (XSS) vulnerability has been identified in Jenkins Core, affecting build environments. The vulnerabilities, tracked as CVE-2026-27099 and CVE-2026-27100, were disclosed by the European Commission under the Jenkins Bug Bounty Program. CVE-2026-27099 is classifie...