CVE-2026-48919

Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation...

CVE-2026-48919

The Jenkins Active Directory Plugin (versions 2.41 and earlier ) is vulnerable to unvalidated deserialization because it follows LDAP referrals from the configured Active Directory server by default. An attacker who controls the Active Directory server or performs a machine-in-the-middle attack c...