Jenkins Project Jenkins TICS Plugin

• CVE-2026-84675 High 7.4 OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the 1.2%
• CVE-2021-21613 Unrated Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control TICS service respons 1.0%