https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:10:22.712162+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-61920 cnvd-2020-61920 2026-10-04T04:10:22.863875+00:00 cnvd-2020-61920 https://cve.radiocsirt.org/vuln/euvd-2026-35990 EUVD-2026-35990 2026-10-04T04:10:22.863930+00:00 EUVD-2026-35990 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2309 fkie_cve-2020-2309 2026-10-04T04:10:22.863957+00:00

A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-g2r3-4g8q-h5rj GHSA-g2r3-4g8q-h5rj — Missing authorization in Jenkins Kubernetes Plugin 2026-10-04T04:10:22.864007+00:00

Affected: Maven: org.csanchez.jenkins.plugins:kubernetes

Jenkins Kubernetes Plugin prior to 1.27.4, 1.26.5, 1.25.4.1, and 1.21.6 does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of credentials IDs in Kubernetes Plugin 1.27.4, 1.26.5, 1.25.4.1, and 1.21.6 requires the appropriate permissions.

 https://cve.radiocsirt.org/vuln/gsd-2020-2309 gsd-2020-2309 2026-10-04T04:10:22.864058+00:00 gsd-2020-2309 https://cve.radiocsirt.org/vuln/rhsa-2021:0034 RHSA-2021:0034 — Red Hat Security Advisory: OpenShift Container Platform 4.5.27 packages and security update 2026-10-04T04:10:22.864079+00:00

jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information disclosure jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials IDs python-urllib3: CRLF injection via HTTP request method