Jenkins SAML Plugin vulnerabilities | LiveThreat CVE Feed

Product

Jenkins SAML Plugin

by Jenkins Project · last CVE Sep 2, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 0Low 0

Severity

Exploitation

Watch

Add Jenkins SAML Plugin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-84668	8.8	0%	Sep 2	Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it… Affected: through 4.618.v441a_27fa_46d2
CVE-2025-64131	7.5	0%	Oct 29	Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a… Affected: through 4.583.vc68232f7018a_