Vulnerability DatabaseCVE-2026-33003

CVE-2026-33003:
Java vulnerability analysis and mitigation

Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Source: NVD

Related Java vulnerabilities:

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-4636	HIGH	8.1	Java	org.keycloak:keycloak-services	No	Yes	Apr 02, 2026
GHSA-2m67-wjpj-xhg9	HIGH	7.5	Java	tools.jackson.core:jackson-core	No	No	Apr 04, 2026
CVE-2026-4634	HIGH	7.5	Java	keycloak-fips	No	Yes	Apr 02, 2026
CVE-2026-4282	HIGH	7.4	Java	keycloak-fips-26.5	No	Yes	Apr 02, 2026
CVE-2026-4325	MEDIUM	5.3	Java	keycloak-fips	No	Yes	Apr 02, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

A threat intelligence database

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."

David EstlickCISO

"Wiz provides a single pane of glass to see what is going on in our cloud environments."

Adam FletcherChief Security Officer

"We know that if Wiz identifies something as critical, it actually is."

Greg PoniatowskiHead of Threat and Vulnerability Management

Get a demo

CVE-2026-33003: Java vulnerability analysis and mitigation