Jenkins Project Jenkins SCM-Manager Plugin

• CVE-2026-70435 Medium 4.2 A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials I 0.2%
• CVE-2026-70434 Medium 4.2 A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obt 0.1%