CVE-2026-42525

Medium

Open

TLP:CLEAR

NVD CVE.org

Critical Infrastructure Phishing

AI Analysis

No AI analysis yet.

Description

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

Details

CVSS Score: 4.3
EPSS Score ⓘ: 0.21%

11.8th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Confidence: 90%
Published: Apr 29, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.