DEEN

Jenkins

CD Foundation · current 2.585

Are you CD Foundation? Claim this page

Turn on update emailsRSS

The current version of Jenkins is 2.585 (as of 06/10/2026). patchletter checks the official source daily and emails you new releases.

Actively exploited vulnerabilities

The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.

  • CVE-2024-23897Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityRansomware

    9.8 critical · over the network, without login · CISA deadline was 9 Sept 24

  • CVE-2018-1000861Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

    9.8 critical · over the network, without login · CISA deadline was 10 Aug 22

  • CVE-2017-1000353Jenkins Remote Code Execution Vulnerability

    9.8 critical · over the network, without login · CISA deadline was 23 Oct 25

  • CVE-2015-5317Jenkins User Interface (UI) Information Disclosure Vulnerability

    7.5 high · over the network, without login · CISA deadline was 2 Jun 23

Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.

BSI security advisories

Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.

All BSI advisories →

Jenkins at a glance

Jenkins is a widely used open-source automation server for CI/CD. Jenkins ships weekly and LTS releases plus frequent security advisories covering the core and its huge plugin ecosystem; as a build system with credentials and deploy reach, prompt patching is essential.

For admins the LTS line is the right base for production. The plugins are where most security issues live — keep them minimal, current, and from trusted sources, and read the security advisories that bundle plugin fixes. Jenkins holds credentials to many systems and executes pipeline code, so lock it down: authentication, least-privilege, isolated agents, and no anonymous access. Update through the built-in mechanism; back up the config (JENKINS_HOME) first. Subscribe to Jenkins security advisories; patchletter surfaces new releases.

Version history & changelog · as detected by patchletter

VersionChannelDateNotes
2.585STABLE06/10/2026Release notes →
2.584STABLE30/09/2026Release notes →
2.583STABLE22/09/2026Release notes →
2.582STABLE15/09/2026Release notes →
2.581STABLE09/09/2026Release notes →
2.580STABLE03/09/2026Release notes →
2.579STABLE26/08/2026Release notes →
2.578STABLE19/08/2026Release notes →
2.577STABLE12/08/2026Release notes →
2.576STABLE06/08/2026Release notes →
2.575STABLE29/07/2026Release notes →
2.574STABLE22/07/2026Release notes →
2.573STABLE15/07/2026Release notes →
2.572STABLE08/07/2026Release notes →

Frequently asked questions

What is the latest version of Jenkins?
Jenkins 2.585, released 06/10/2026. patchletter checks the vendor's official source daily for new releases.
Where can I find the Jenkins release notes?
The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
How do I get notified about new Jenkins updates?
Tick Jenkins off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.

An email as soon as a new Jenkins version ships

We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.

Watch JenkinsSee patchletter Pro →

Embed this badge

The badge shows the current Jenkins version and keeps it up to date. Anyone may embed it, no account needed.

Jenkins badge
[![Jenkins](https://patchletter.com/badge/jenkins.svg)](https://patchletter.com/en/software/jenkins)
https://patchletter.com/badge/jenkins.svg

Also available: ?v=eol (end of support) and ?v=cve (actively exploited).

Related tools in Development & DevOps