Jenkins Security Advisory 2026-03-18

Affects Jenkins Core Affects plugin: LoadNinja

CSIRTS triage

What: Multiple vulnerabilities affect Jenkins Core and the LoadNinja plugin.
Who is affected: Users of Jenkins Core and LoadNinja plugin.
Urgency: Remediation is important due to the unknown severity of the vulnerabilities.
Action: Monitor for updates and apply patches as they become available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Core

Get an email when a new Core advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2026-330011.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 63% of all scored CVEs.
Low exploitation riskCVE-2026-330020.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
Low exploitation riskCVE-2026-330030.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
Low exploitation riskCVE-2026-330040.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.

CVE	CSIRTS overview	External
CVE-2026-33001	coverage & exploitation status	NVD · CVE.org
CVE-2026-33002	coverage & exploitation status	NVD · CVE.org
CVE-2026-33003	coverage & exploitation status	NVD · CVE.org
CVE-2026-33004	coverage & exploitation status	NVD · CVE.org