CVE-2026-92140
6.8 MEDIUMPublished 2026-09-16 · Updated 2026-09-18
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-79
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- LOWCVE-2025-15677
- LOWCVE-2025-15698
- MEDIUMCVE-2025-71419PoC
- UNSCOREDCVE-2026-10032PoC
- MEDIUMCVE-2026-11608
- MEDIUMCVE-2026-12402
- MEDIUMCVE-2026-1256
- MEDIUMCVE-2026-13770
Related by shared AI tags and CWE weakness class. Browse the full archive.