{"vulnerability": "cve-2026-19429", "sightings": [{"uuid": "450cee4b-0878-43dd-bd8d-aeb33d9e7e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqgt4gzcu2u", "content": "CVE-2026-19429 - jenkins\nA security patch for Jenkins Project Jenkins is incomplete, allowing an authenticated attacker to access sensitive files on the server. This can happen because the patch does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jenkins #jenkinsproject #CVE #infosec", "creation_timestamp": "2026-08-10T15:42:05.043999Z"}, {"uuid": "ee37ef6f-6eb0-43a0-a604-2c6b8549d4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msrcbmtv622n", "content": "CVE-2026-19429 is trending. Hype score 2, currently #9 on cvemon.\n\nJenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink destinations but not targets. The CVE-2026-33001 fix enforces\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19429", "creation_timestamp": "2026-08-10T23:53:23.245050Z"}]}