CVE-2026-42525 — Jenkins Project / Jenkins Microsoft Entra ID (previously Azure AD) Plugin

CVE-2026-42525

Jenkins Project / Jenkins Microsoft Entra ID (previously Azure AD) Plugin PUBLISHED

Description (CNA)

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Microsoft Entra ID (previously Azure AD) Plugin	affected 0 through 666.v6060de32f87d

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2026-04-29/#SECURITY-3760

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.