https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T22:44:54.919681+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-53142 cnvd-2020-53142 2026-10-21T22:44:55.007600+00:00 cnvd-2020-53142 https://cve.radiocsirt.org/vuln/euvd-2026-35905 EUVD-2026-35905 2026-10-21T22:44:55.007647+00:00 EUVD-2026-35905 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2261 fkie_cve-2020-2261 2026-10-21T22:44:55.007663+00:00

Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controller

 https://cve.radiocsirt.org/vuln/ghsa-jq84-6fmm-6qv6 GHSA-jq84-6fmm-6qv6 — OS command execution vulnerability in Perfecto Plugin 2026-10-21T22:44:55.007696+00:00

Affected: Maven: io.jenkins.plugins:perfecto

Perfecto Plugin allows specifying Perfecto Connect Path and Perfecto Connect File Name in job configurations.

This command is executed on the Jenkins controller in Perfecto Plugin 1.17 and earlier, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controller.

Perfecto Plugin 1.18 executes the specified commands on the agent the build is running on.

 https://cve.radiocsirt.org/vuln/gsd-2020-2261 gsd-2020-2261 2026-10-21T22:44:55.007727+00:00 gsd-2020-2261