CVE-2026-70448

HIGH

Jenkins Ivy Report Plugin XML External Entity (XXE) Vulnerability

Generated titleSource: EIP title enrichment
STIX 2.1 vulnerability

Record summary

CVE-2026-70448 has a selected CVSS score of 7.1 (high).

Description

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 5, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Jenkins Ivy Report Plugin

Browse Jenkins Project / Jenkins Ivy Report Plugin

Default status: unknown

CVE ListThrough 1.2affected

References

2