PatchTheCVEec2 fleet vulnerabilities and fixes
Recent CVEs affecting ec2 fleet, with upgrade or downgrade steps. 2 tracked.
Also searched as: ec2fleet.
ec2 fleet has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-06-24. Highest priority: CVE-2026-57294 (score 23/100).
- CVE-2026-57294 MEDIUM 5.4 UPGRADE A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers w
- CVE-2026-57295 MEDIUM 5.4 UPGRADE A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and ear
FAQ
How do I fix ec2 fleet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ec2 fleet being exploited right now?
None of the tracked ec2 fleet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ec2 fleet CVE should I patch first?
CVE-2026-57294 currently ranks highest (23/100): A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers w.