CVE-2026-48919

Description

Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.

Affected Platforms

Weakness Type

CWE-502

References

• https://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3659