Skip to content

CVE-2026-48925

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
May 28, 2026
Last Seen
May 28, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities Discovered in Jenkins Plugins72.0

Two significant vulnerabilities have been identified in Jenkins plugins, CVE-2026-48922 and CVE-2026-48925. The Jenkins Credentials Binding Plugin allows attackers to write files to arbitrary locations, potentially leading to remote code execution. This affects versions 720.v3f6decef43ea_ and earlie...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Cwe-352 - Cross-Site Request Forgery (csrf)JenkinsCross-site request forgery