Jenkins OpenId Connect Authentication Plugin 身份验证缺陷漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2026-49468: LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass
• PoCCVE-2026-86242: Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch
• PoCCVE-2026-56681: 9router <=0.5.4 - Authentication Bypass
• PoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret
• PoCoidc-signing-alg-none-supported: OpenID Connect - Unsigned (alg none) ID Token Supported
• PoCCVE-2026-84434: WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload
• PoCCVE-2026-86218: N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution
• PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass
• PoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation
• PoCarangodb-auth-bypass: ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE
• PoCCVE-2026-0650: OpenFlagr <= 1.1.18 - Authentication Bypass
• PoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()
• PoCCVE-2026-30849: MantisBT < 2.28.1 - SOAP API Authentication Bypass