UNKNOWN NVD

CVE-2026-84664

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to conne

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators.

References

https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4097

Published: 2026-09-02 · Source: NVD · Feed updated: 2026-09-02

This unknown severity vulnerability was published on 2026-09-02 via NVD.

vulnfeed aggregates 11639 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.