CVE-2026-92141

—

CVSS 3.1

4.3 medium

EPSS

—

Published

Sep 16, 2026 (10h ago)

Modified

Sep 16, 2026

Description

Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (—)

In the news0 stories

No ingested article mentions this CVE yet.