Jenkins Microsoft Entra ID (previously Azure AD) Plugin vulnerabilities

Product

Jenkins Microsoft Entra ID (previously Azure AD) Plugin

by Jenkins Project · last CVE Sep 2, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Jenkins Microsoft Entra ID (previously Azure AD) Plugin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-84672	8.8	0%	Sep 2	Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name,… Affected: through 710.v0b_ff8e9cc2d2
CVE-2026-42525	4.3	0%	Apr 29	Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing… Affected: through 666.v6060de32f87d