https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:59:07.719665+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-06802 cnvd-2015-06802 2026-10-03T08:59:07.732893+00:00 cnvd-2015-06802 https://cve.radiocsirt.org/vuln/euvd-2026-90548 EUVD-2026-90548 2026-10-03T08:59:07.732938+00:00 EUVD-2026-90548 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1806 fkie_cve-2015-1806 2026-10-03T08:59:07.732953+00:00

The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-mm9c-4cv4-7rfv GHSA-mm9c-4cv4-7rfv — Jenkins allows for Privilege Escalation by Remote Authenticated Users 2026-10-03T08:59:07.732984+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2015-1806 gsd-2015-1806 2026-10-03T08:59:07.733010+00:00 gsd-2015-1806 https://cve.radiocsirt.org/vuln/rhsa-2015:1844 RHSA-2015:1844 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.7 security, bug fix and enhancement update 2026-10-03T08:59:07.733021+00:00

jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: external entity injection via XPath (SECURITY-165) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: External entity processing in XML can reveal sensitive local files (SECURITY-167) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180)