Jenkins URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2026-53440
Jenkins 2.567 and earlier LTS 2.555.2 and earlier does not ensure that the quotfromquot parameter in the quotDelegate to servlet containerquot security realm is safe to redirect to after login allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.