https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:18:10.722540+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-322123 EUVD-2026-322123 2026-10-09T01:18:10.725391+00:00 EUVD-2026-322123 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48919 fkie_cve-2026-48919 2026-10-09T01:18:10.725427+00:00

Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.

 https://cve.radiocsirt.org/vuln/ghsa-p2gw-f3rv-82mw GHSA-p2gw-f3rv-82mw — Jenkins Active Directory Plugin deserializes data from LDAP referrals without validation 2026-10-09T01:18:10.725458+00:00

Affected: Maven: org.jenkins-ci.plugins:active-directory

Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals from the configured Active Directory server by default. These can forward to an RMI URL that causes Jenkins to deserialize attacker-controlled data, resulting in Remote Code Execution (RCE) on the Jenkins controller if deserialization "gadgets" are available on the classpath.

This allows attackers able to control the configured Active Directory server, or able to perform a machine-in-the-middle attack, to execute code on the Jenkins controller.

Active Directory Plugin 2.41.1 no longer follows LDAP referrals by default.

Administrators unable to update to a fixed version can start Jenkins with the Java system property `hudson.plugins.active_directory.referral.ignore` set to `true` to mitigate the vulnerability.

Administrators of Jenkins controllers requiring following LDAP referrals can set the Java system property `hudson.plugins.active_directory.referral.ignore` to `false` to restore the previous behavior.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1707 WID-SEC-W-2026-1707 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-09T01:18:10.725536+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.