Jenkins Ldap — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Ldap, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-48916 — CVSS 6.6 (medium): Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.
• CVE-2026-48917 — CVSS 6.6 (medium): Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.