CVE-2026-9674: Jenkins Multijob

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.

Affected products

• Jenkins Multijob: before 669.v9d96a_d9c71b_0 (fixed in 669.v9d96a_d9c71b_0)

Published 2026-05-27. Last modified 2026-06-17.