Medium · 4.3 CVE-2026-84662 EUVD-2026-70128GHSA-xf3h-5wg7-hr4f

Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attacker…

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins LDAP Plugin Category: Web / CMS

Description

Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL.

Affected products

Vendor	Product	Affected	Fixed
Jenkins Project	Jenkins LDAP Plugin	≤ 807.809.vd3a_4e5e4ec98	—

Advisories 1

WID-SEC-2026-3166 Jenkins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 21, 2026

References

Jenkins Security Advisory 2026-09-02 vendor-advisory