High-Severity Jenkins Vulnerability Allows Unauthenticated DoS via HTTP CLI

**Jenkins CVE-2025-67635 — Remote DoS via HTTP CLI:** A high-severity unauthenticated denial-of-service vulnerability in Jenkins (versions 2.540 and earlier; LTS 2.528.2 and earlier) allows remote attackers to send specially crafted HTTP-based CLI requests that corrupt streams and exhaust request-handling threads, rendering servers unresponsive; organizations should upgrade immediately to Jenkins 2.541 or LTS 2.528.3 and monitor for unusual connection/thread activity.