CVE-2026-53437 json
Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL
published 2026-06-10 4 mo ago modified 2026-10-26 13 d ago also BIT-jenkins-2026-53437 , EUVD-2026-36021 , GHSA-463r-5m89-4xfr
- cvss
- 7.4
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 37%
- public exploits
- 0
- none known
Summary
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks.
Patch / fix
- maven org.jenkins-ci.main:jenkins-core 2.555.3, 2.568
- bitnami jenkins 2.555.3, 2.568.0
- Jenkins Project Jenkins 2.568
- Red Hat OpenShift Developer Tools and Services 4.12 1786628667
- Red Hat OpenShift Developer Tools and Services 4.13 1786628681
- Red Hat OpenShift Developer Tools and Services 4.14 1786533561
- Red Hat OpenShift Developer Tools and Services 4.15 1786533565
- Red Hat OpenShift Developer Tools and Services 4.16 1787125166
- Red Hat OpenShift Developer Tools and Services 4.17 1787124635
- Red Hat OpenShift Developer Tools and Services 4.18 1787125069
- Red Hat OpenShift Developer Tools and Services 4.19 1787124632
- Red Hat OpenShift Developer Tools and Services 4.20 1787124925
- Red Hat OpenShift Developer Tools and Services 4.21 1787125311
- Red Hat OpenShift Developer Tools and Services 4.22 1787124779
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2026-53437 updated cvss 7.4
jenkins: Jenkins: Phishing attack via improper redirect URL validation
-
Red Hat OpenShift Developer Tools and Services jenkinsaffected: workaround, no fix available
-
Red Hat OpenShift Developer Tools and Services 4.12 ocp-tools-4/jenkins-rhel8 1786628667fixed: vendor fix RHSA-2026:60247
-
Red Hat OpenShift Developer Tools and Services 4.13 ocp-tools-4/jenkins-rhel8 1786628681fixed: vendor fix RHSA-2026:60249
-
Red Hat OpenShift Developer Tools and Services 4.14 ocp-tools-4/jenkins-rhel8 1786533561fixed: vendor fix RHSA-2026:60248
-
Red Hat OpenShift Developer Tools and Services 4.15 ocp-tools-4/jenkins-rhel8 1786533565fixed: vendor fix RHSA-2026:60239
-
Red Hat OpenShift Developer Tools and Services 4.16 ocp-tools-4/jenkins-rhel9 1787125166fixed: vendor fix RHSA-2026:60251
-
Red Hat OpenShift Developer Tools and Services 4.17 ocp-tools-4/jenkins-rhel9 1787124635fixed: vendor fix RHSA-2026:60246
-
Red Hat OpenShift Developer Tools and Services 4.18 ocp-tools-4/jenkins-rhel9 1787125069fixed: vendor fix RHSA-2026:60250
show 5 moreshow fewer
-
Red Hat OpenShift Developer Tools and Services 4.19 ocp-tools-4/jenkins-rhel9 1787124632fixed: vendor fix RHSA-2026:60252
-
Red Hat OpenShift Developer Tools and Services 4.20 ocp-tools-4/jenkins-rhel9 1787124925fixed: vendor fix RHSA-2026:60259
-
Red Hat OpenShift Developer Tools and Services 4.21 ocp-tools-4/jenkins-rhel9 1787125311fixed: vendor fix RHSA-2026:60254
-
Red Hat OpenShift Developer Tools and Services 4.22 ocp-tools-4/jenkins-rhel9 1787124779fixed: vendor fix RHSA-2026:60256
-
Red Hat OpenShift Developer Tools and Services 4.12 ocp-tools-4/jenkins-agent-base-rhel8 1786628706 Red Hat OpenShift Developer Tools and Services 4.13 ocp-tools-4/jenkins-agent-base-rhel8 1786628711 Red Hat OpenShift Developer Tools and Services 4.14 ocp-tools-4/jenkins-agent-base-rhel8 1786628748 Red Hat OpenShift Developer Tools and Services 4.15 ocp-tools-4/jenkins-agent-base-rhel8 1786628726 Red Hat OpenShift Developer Tools and Services 4.16 ocp-tools-4/jenkins-agent-base-rhel9 1787124634 Red Hat OpenShift Developer Tools and Services 4.17 ocp-tools-4/jenkins-agent-base-rhel9 1787124986not affected: vulnerable code not present
+5 more productsfewer
Red Hat OpenShift Developer Tools and Services 4.18 ocp-tools-4/jenkins-agent-base-rhel9 1787124633 Red Hat OpenShift Developer Tools and Services 4.19 ocp-tools-4/jenkins-agent-base-rhel9 1787124663 Red Hat OpenShift Developer Tools and Services 4.20 ocp-tools-4/jenkins-agent-base-rhel9 1787125493 Red Hat OpenShift Developer Tools and Services 4.21 ocp-tools-4/jenkins-agent-base-rhel9 1787125679 Red Hat OpenShift Developer Tools and Services 4.22 ocp-tools-4/jenkins-agent-base-rhel9 1787125563
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 4 mo ago
Exploit prediction
0.43% chance of exploitation in the next 30 days, higher than 37% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
| CISA ADP | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N |
| GitHub | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
| CNA | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
| CNA | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N |
| OSV | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.main:jenkins-core | <2.555.3 >=2.556, <2.568 |
2.555.3 2.568 |
| bitnami | jenkins | <2.555.3 >=2.556.0, <2.568.0 |
2.555.3 2.568.0 |
Affected products
- Jenkins Project Jenkins
- Red Hat OpenShift Developer Tools and Services 4.12
- Red Hat OpenShift Developer Tools and Services 4.13
- Red Hat OpenShift Developer Tools and Services 4.14
- Red Hat OpenShift Developer Tools and Services 4.15
- Red Hat OpenShift Developer Tools and Services 4.16
- Red Hat OpenShift Developer Tools and Services 4.17
- Red Hat OpenShift Developer Tools and Services 4.18
- Red Hat OpenShift Developer Tools and Services 4.19
- Red Hat OpenShift Developer Tools and Services 4.20
- Red Hat OpenShift Developer Tools and Services 4.21
- Red Hat OpenShift Developer Tools and Services 4.22
Classification
- Weakness
-
- CWE-601 URL Redirection to Untrusted Site
- Technology feeds
References
-
github.com
/jenkinsci/jenkins/commit/b32f2f27a82ed187a34f55b05edcc4a83563d574
web
-
github.com
/jenkinsci/jenkins/commit/8ef52891b07eb639b38271e4bab5dab3c0f10fda
web
-
jenkins.io
/security/advisory/2026-06-10/#SECURITY-3711+3755
vendor-advisory, web, advisory
-
access.redhat.com
/errata/RHSA-2026:60247
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60249
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60248
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60239
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60251
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60246
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60250
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60252
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60259
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60254
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2026:60256
vendor-advisory, web
-
access.redhat.com
/security/cve/CVE-2026-53437
vdb-entry, web
-
bugzilla.redhat.com
/show_bug.cgi?id=2487544
issue-tracking, web
-
security.access.redhat.com
/data/csaf/v2/vex/2026/cve-2026-53437.json
web
-
nvd.nist.gov
/vuln/detail/CVE-2026-53437
advisory, web
-
github.com
/jenkinsci/jenkins
package
Sources
- CVE List CVE-2026-53437
- GitHub Advisory GHSA-463r-5m89-4xfr
- NVD CVE-2026-53437
- OSV BIT-jenkins-2026-53437
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.