CVE-2026-92136
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 16, 2026
Vendor
unknown
Description
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.