CVE-2016-0788: Jenkins

Critical severity, CVSS 9.8. EPSS: 11.8% chance of exploitation in the next 30 days.

The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

Affected products

• Jenkins Jenkins: version 1.642.1 only; up to and including 1.649
• Red Hat Openshift: version 3.1 only

Published 2016-04-07. Last modified 2026-06-17.