CISA warns of a critical Jenkins vulnerability (CVE-2024-23897) that allows remote code execution and is actively exploited. Unpatched servers, especially in the U.S. and China, are at risk. Update Jenkins immediately and check other exposed systems for similar threats.