CVE-2026-84664
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators.
| Vendor | jenkins project |
| Product | jenkins gitlab plugin |
| Published | Sep 2, 2026 |
| Last Updated | Sep 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins gitlab plugin
Be the first to know when new medium vulnerabilities affecting jenkins project jenkins gitlab plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins GitLab Plugin
0 ≤ 1.9.16