Actively exploited vulnerabilities affecting Jenkins products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2017-1000353https://wildfortech.com/security#CVE-2017-1000353This Jenkins vulnerability allows remote attackers to execute arbitrary code by exploiting the CLI's deserialization handling. An attacker can send a specially crafted serialized Java SignedObject to the remoting-based Jenkins CLI, which then deserializes it through a new ObjectInputStream, completely sidestepping Jenkins' existing blocklist protections. Because Jenkins is widely used in CI/CD pipelines, successful exploitation could give attackers full control over build infrastructure and potentially the broader software supply chain.Thu, 02 Oct 2025 00:00:00 GMTJenkinsJenkins