VYPR
← All advisories
Medium severity6.6NVD Advisory· Published May 27, 2026· Updated Jun 2, 2026

CVE-2026-48917

CVE-2026-48917

Description

Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Jenkins Project/LDAP Plugininferred2 versions
    <=807.v7d7de30930cf+ 1 more
    • (no CPE)range: <=807.v7d7de30930cf
    • (no CPE)range: <=807.v7d7de30930cf
  • Jenkins Project/LDAP2 versions
    cpe:2.3:a:jenkins:ldap:807.v7d7de30930cf:*:*:*:*:jenkins:*:*+ 1 more
    • cpe:2.3:a:jenkins:ldap:807.v7d7de30930cf:*:*:*:*:jenkins:*:*
    • cpe:2.3:a:jenkins:ldap:*:*:*:*:*:jenkins:*:*range: <=793.v754d6b_41b_ea_4

Patches

Vulnerability mechanics

References

1

News mentions

2
CVE-2026-48917 · Medium · VYPR