Maven/org.jenkins-ci.plugins:active-directory CVE-2026-57288: low 3.7, EPSS 0.33%

Jenkins Active Directory Plugin has an LDAP injection vulnerability

Action: Upgrade org.jenkins-ci.plugins:active-directory to 2.41.2 or later.

Affected

Fixed versions

Sources

• osv: GHSA-gx55-p8g7-p3fh
• https://nvd.nist.gov/vuln/detail/CVE-2026-57288
• https://github.com/jenkinsci/active-directory-plugin/commit/5028dea8e0acc45ff9d6be302d4e1cbc1f9da464
• https://github.com/jenkinsci/active-directory-plugin
• https://github.com/jenkinsci/active-directory-plugin/releases/tag/active-directory-2.41.2
• https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3651

CVE-2026-57288 · published 2026-06-24T15:31:47Z · modified 2026-09-25T19:00:05.547576900Z · JSON