CVE-2026-84677 · Jenkins
Stored XSS vulnerability in update-center2
Published · Fixed in 3.18.4 · Medium 5.4 · Reporter credit
Security Research · Cryptography · Computer Systems
박연오 Yeonoh Park
SeoulTech Computer Engineering student and undergraduate researcher at the Cryptography Information Security Laboratory, focusing on vulnerability research, system security, and cryptography.
Key Outcomes
A compact view of verified research and academic outcomes.
- CVEs
- 5
- Vendor-confirmed outcomes
- 13
- Products / workspaces
- 40
- Conference paper award
- 1
92 responsible disclosure reports submitted across OSS and bug bounty programs from March 22 to August 13, 2026.
Selected Work
Representative security and academic research. Detailed records live on their dedicated pages.
CVE-2026-57590 / CVE-2026-66082 · Apache DolphinScheduler
Two separately confirmed authorization boundary findings
Vendor confirmed with reporter credit · Severity, remediation, and advisory details pending
Conference paper · 2026
Analysis of Privilege Transfer Vulnerabilities in Messenger-Based Local AI Agents
Gold Prize · Korea Digital Contents Society Undergraduate Paper Competition