CVE-2026-84668
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 02, 2026
Vendor
unknown
Description
Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user.