3 matches found
CVE-2026-48918
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default...
6.6CVSS0.00371EPSS
SaveExploits0References1
CVE-2026-48918
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default...
0.00371EPSS
SaveExploits0References1
CVE-2026-48918
The Jenkins Active Directory Plugin (version 2.41 and earlier) is vulnerable to Remote Code Execution (RCE) because it follows LDAP referrals by default. These referrals can forward to an RMI URL , triggering the deserialization of attacker-controlled data if suitable "gadgets" exist on the class...
6.6CVSS5.8AI score0.00371EPSS
SaveExploits0References1Affected Software1
20