CVE-2026-92138
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the victim.
| Vendor | jenkins project |
| Product | jenkins bitbucket server integration plugin |
| Published | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins bitbucket server integration plugin
Be the first to know when new unknown vulnerabilities affecting jenkins project jenkins bitbucket server integration plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins Bitbucket Server Integration Plugin
0 ≤ 6.0.1