← Back to CVE search

CVE-2026-48919

Jenkins Active Directory Plugin

Description

Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.

CVSS 6.6EPSS 0.26%Risk 0.68
View source
Published
2026-05-27 15:16:31
Affected versions
<=2.41
Type
Core software
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H