CVE-2026-92138 | Jenkins Project Bitbucket Server Integration Plugin up to 6.0.1 OAuth Authorization Endpoint oauth_callback improper authorization

A vulnerability was found in Jenkins Project Bitbucket Server Integration Plugin up to 6.0.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component OAuth Authorization Endpoint. The manipulation of the argument oauth_callback leads to improper authorization.

This vulnerability is listed as CVE-2026-92138. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More