CVE-2026-84677 · Jenkins
Stored XSS vulnerability in update-center2
Published · Fixed in 3.18.4 · Medium 5.4
Vulnerability Research · System Security · Computer Systems
박연오 Yeonoh Park
SeoulTech Computer Engineering student and undergraduate researcher at the Cryptography Information Security Laboratory, focusing on vulnerability research and system security.
Key Outcomes
A compact view of verified research and academic outcomes.
- Findings with CVE IDs
- 9
- Vendor-confirmed outcomes
- 16
- Conference paper award
- 1
Selected Work
Representative security and academic research. Detailed records live on their dedicated pages.
CVE-2026-57590 · Apache DolphinScheduler
Missing project authorization in Task Group APIs
Published · Apache: Low (no numeric score) · CISA-ADP: High 8.1 (CVSS 3.1). Additional published findings: CVE-2026-71897, CVE-2026-66082, and CVE-2026-66084.
Conference paper · 2026
Analysis of Privilege Transfer Vulnerabilities in Messenger-Based Local AI Agents
Gold Prize · Korea Digital Contents Society Undergraduate Paper Competition