PatchTheCVEemail extension vulnerabilities and fixes
Recent CVEs affecting email extension, with upgrade or downgrade steps. 1 tracked.
Also searched as: emailextension.
email extension has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-05-27. Highest priority: CVE-2026-48920 (score 36/100).
- CVE-2026-48920 HIGH 8.8 UPGRADE Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email cont
FAQ
How do I fix email extension vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is email extension being exploited right now?
None of the tracked email extension CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which email extension CVE should I patch first?
CVE-2026-48920 currently ranks highest (36/100): Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email cont.