CVE-2026-9674CWE-352csrf

CVE-2026-9674

Medium · published May 27, 2026

CVSS v3.1

4.3

EPSS

Percentile

16.0

In the wild

Unconfirmed

What it is

A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.

The record

Technical detail

CVSS v3.1: 4.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00254 · 16.0th percentile
Weakness: CWE-352 · Cross-Site Request Forgery (CSRF)
Published: 2026-05-27T19:16Z

Affected products (1)

Product	Versions	Fixed in
jenkins/multijob	< 669.v9d96a_d9c71b_0	669.v9d96a_d9c71b_0

References (1)

https://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3781 · [email protected]

EPSS history

Timeline

27 MAY 14:14Z
A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds
cvelistv5