https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:33:20.621531+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-90584 EUVD-2026-90584 2026-10-03T07:33:20.625384+00:00 EUVD-2026-90584 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1811 fkie_cve-2015-1811 2026-10-03T07:33:20.625415+00:00

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

 https://cve.radiocsirt.org/vuln/ghsa-qg7x-4h4q-3m49 GHSA-qg7x-4h4q-3m49 — XML external entity (XXE) vulnerability in Jenkins 2026-10-03T07:33:20.625446+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

XML external entity (XXE) vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

 https://cve.radiocsirt.org/vuln/gsd-2015-1811 gsd-2015-1811 2026-10-03T07:33:20.625470+00:00 gsd-2015-1811 https://cve.radiocsirt.org/vuln/rhsa-2015:1844 RHSA-2015:1844 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.7 security, bug fix and enhancement update 2026-10-03T07:33:20.625482+00:00

jenkins: Combination filter Groovy script unsecured (SECURITY-125) jenkins: directory traversal from artifacts via symlink (SECURITY-162) jenkins: update center metadata retrieval DoS attack (SECURITY-163) jenkins: external entity injection via XPath (SECURITY-165) jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) jenkins: External entity processing in XML can reveal sensitive local files (SECURITY-167) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) jenkins: forced API token change (SECURITY-180)