CVE-2026-84672
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, allowing attackers who can create an Entra group with a colliding display name to gain the permissions configured for a privileged group.
| Vendor | jenkins project |
| Product | jenkins microsoft entra id (previously azure ad) plugin |
| Published | Sep 2, 2026 |
| Last Updated | Sep 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins microsoft entra id (previously azure ad) plugin
Be the first to know when new high vulnerabilities affecting jenkins project jenkins microsoft entra id (previously azure ad) plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins Microsoft Entra ID (previously Azure AD) Plugin
0 ≤ 710.v0b_ff8e9cc2d2