Jenkins — PoC Archivehttps://poc.intelseclab.com/tags/jenkins/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Jenkins ClassFilter Deserialization Bypass → Arbitrary File Read — CVE-2026-53435https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53435-jenkins-deser-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53435-jenkins-deser-file-read/High severity (CVSS 9.1) — web · CVE-2026-53435 (Jenkins SECURITY-3707). Status: PoC. Affects: Jenkins (core), View configuration (config.xml) deserialization path. Tags: jenkins, deserialization, classfilter-bypass, xstream, config-xml, stapler, arbitrary-file-read, docker-lab, cwe-502.webHighjenkinsdeserializationclassfilter-bypassxstreamconfig-xmlstaplerarbitrary-file-readdocker-labcwe-502Jenkins CLI Arbitrary File Read to RCE (CVE-2024-23897)https://poc.intelseclab.com/pocs/web/2026-05-17_jenkins-cli-arbitrary-file-read-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_jenkins-cli-arbitrary-file-read-rce/Critical severity (CVSS 9.8) — web · CVE-2024-23897. Status: Weaponized. Affects: Jenkins controller (CLI endpoint). Tags: arbitrary-file-read, Jenkins, CLI, credential-theft, RCE, unauthenticated, KEV.webCriticalarbitrary-file-readJenkinsCLIcredential-theftRCEunauthenticatedKEV