Jenkins 2.401.3 Actively exploited
Attackers are using a vulnerability in this version right now. Upgrade immediately.
Upgrade to 2.568.3
The lowest fixed release that is still supported.
- Known vulnerabilities
- 50 (2 critical, 14 high)
- End of life
- Yes, since 2023-08-23
- Data as of
- 2026-10-24 18:07 UTC
Vulnerabilities
- CVE-2024-23897 critical exploited fixed in 2.426.3
- CVE-2026-70426 critical fixed in 2.568.2
- CVE-2026-84650 high fixed in 2.568.3
- CVE-2026-84648 high fixed in 2.568.3
- CVE-2026-84647 high fixed in 2.568.3
- CVE-2026-84645 high fixed in 2.568.3
- CVE-2026-53435 high fixed in 2.555.3
- CVE-2026-33001 high fixed in 2.541.3
- CVE-2024-43044 high fixed in 2.452.4
- CVE-2024-23898 high fixed in 2.426.3
And 40 more with lower severity.
- 1 Jenkins vulnerability is still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.