VULNERABILITY INTELLIGENCE

CVE-2026-48919

CVSS score6.6 MEDIUM

EPSS probability0.26%

CISA KEVNot currently listed

Published2026-05-27

Last modified2026-10-14

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.