References https://zone.huoxian.cn/d/2885-jenkinscve-2024-23897 https://www.secrss.com/articles/63235 https://github.com/Sec-Fork/POC-20250106/blob/main/Jenkins/Jenkins-Remoting%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E(CVE-2024-43044).md https://www.cnblogs.com/ggborn-001/p/18005658 https://isecurity.huawei.com/sec/web/viewAlert.do?id=2483 https://blog.nsfocus.net/jenkinscve-2024-23897/ https://www.leavesongs.com/PENETRATION/jenkins-cve-2024-23897.html https://www.hnitns.com/index.php?id=189 https://whoopscs.com/posts/jenkins-vuln-list/ https://www.huaweicloud.com/notice/2022/20240126170948005.html https://www.anquanke.com/post/id/152955 https://cloud.tencent.com/developer/article/1165414 https://www.jenkins.io/security/advisory/2026-03-18/ https://cert.europa.eu/publications/security-advisories/2024-014/ https://github.com/vulhub/vulhub/blob/master/jenkins/CVE-2024-23897/README.zh-cn.md https://www.ucloud.cn/site/ucsafe/6672.html https://wlaq.dlut.edu.cn/info/1095/5284.htm https://rivers.chaitin.cn/blog/cqu3gq10lne6bf932pv0 https://mdr.skyeye.qianxin.com/forum/community/Vul_analysis/recommended?page=4
Related VulnerabilitiesPoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_codePoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code ExecutionPoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code ExecutionPoCCVE-2026-41679: Paperclip - Remote Code ExecutionPoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code ExecutionPoCCVE-2026-58123: Hermes WebUI < 0.51.788 - Remote Code ExecutionPoCCVE-2026-82222: GiveWP <= 4.16.7.1 - Remote Code ExecutionJenkins 代码执行漏洞(CVE-2026-84645)PoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code ExecutionPoCCVE-2026-40217: LiteLLM < 1.25.0 - Remote Code ExecutionPoCCVE-2026-45695: Kopia Server 0.23.0 - Remote Code ExecutionPoCCVE-2026-61511: vBulletin 6.x - Remote Code ExecutionPoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution