https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:09:52.787487+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-13095 cnvd-2019-13095 2026-10-03T14:09:52.791611+00:00 cnvd-2019-13095 https://cve.radiocsirt.org/vuln/euvd-2026-60562 EUVD-2026-60562 2026-10-03T14:09:52.791650+00:00 EUVD-2026-60562 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1003049 fkie_cve-2019-1003049 2026-10-03T14:09:52.791665+00:00

Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.

 https://cve.radiocsirt.org/vuln/ghsa-742j-jcfr-23w3 GHSA-742j-jcfr-23w3 — Insufficient Session Expiration in Jenkins 2026-10-03T14:09:52.791694+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.

 https://cve.radiocsirt.org/vuln/gsd-2019-1003049 gsd-2019-1003049 2026-10-03T14:09:52.791720+00:00 gsd-2019-1003049 https://cve.radiocsirt.org/vuln/rhba-2019:1605 RHBA-2019:1605 — Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update 2026-10-03T14:09:52.791732+00:00

jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) jenkins: Jenkins accepted cached legacy CLI authentication jenkins: Improper escaping of job URLs in f:validateButton leads to cross-site scripting vulnerability.