4 matches found
CVE-2026-48916
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals...
6.6CVSS5.8AI score0.00371EPSS
SaveExploits0References1
CVE-2026-48917
The Jenkins LDAP Plugin (version 807.v7d7de30930cf and earlier) is vulnerable to insecure deserialization because it follows LDAP referrals without validation. An attacker who controls the configured LDAP server or performs a machine-in-the-middle attack can redirect the plugin to an RMI URL, cau...
6.6CVSS5.8AI score0.00433EPSS
SaveExploits0References1Affected Software1
20