CVE-2026-84674

The Jenkins XebiaLabs XL Deploy Plugin versions 26.1.0 and earlier are vulnerable due to missing permission checks, enabling attackers with Overall/Read permissions to enumerate stored credential IDs. This exposure could lead to unauthorized access to sensitive information, potentially compromising the integrity of the Jenkins environment. Organizations using this plugin should prioritize patching to mitigate the risk of credential enumeration and subsequent exploitation.