Medium severity4.3NVD Advisory· Published Sep 16, 2026· Updated Sep 18, 2026
CVE-2026-92141
CVE-2026-92141
Description
Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2.4.1
Patches
Vulnerability mechanics
References
1News mentions
2- Jenkins Plugins: 20 Vulnerabilities Disclosed, Script Security Plugin at High RiskVypr Intelligence · Sep 16, 2026
- Jenkins Security Advisory 2026-09-16Jenkins Security Advisories · Sep 16, 2026