Security Advisory
CVE-2026-84674
5.4
MEDIUM
Vulnerability Description
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published Date
September 2, 2026
Official Source
NIST NVD Advisory