Jenkins security advisory (AV26-515)

Malware News
1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV26-515<br /><strong>Date: </strong>May&nbsp;27, 2026</p>

On May 27, 2026, Jenkins published a security advisory to address vulnerabilities in the following products:

  • Active Directory Plugin – version 2.4.1 and prior
  • AppSpider Plugin – version 1.0.17 and prior
  • Bitbucket OAuth Plugin – version 0.17 and prior
  • buildgraph-view Plugin – version 1.8 and prior
  • Credentials Binding Plugin – version 720.v3f6decef43ea_ and prior
  • Email Extension Plugin – version 1933.v45cec755423f and prior
  • GitHub Integration Plugin – version 0.7.3 and prior
  • Job Import Plugin – version 143.v044a_2e819b_27 and prior
  • LDAP Plugin – version 807.v7d7de30930cf and prior
  • Pipeline: Groovy Libraries Plugin – version 797.v90ea_a_9b_e45a_0 and prior
  • Multijob Plugin – version 662.vd2e0001f6b_b_d and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

</div>

Article Link: Jenkins security advisory (AV26-515) - Canadian Centre for Cyber Security