https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:25:04.464882+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-25266 cnvd-2021-25266 2026-10-08T19:25:04.467941+00:00 cnvd-2021-25266 https://cve.radiocsirt.org/vuln/euvd-2026-22331 EUVD-2026-22331 2026-10-08T19:25:04.467974+00:00 EUVD-2026-22331 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21631 fkie_cve-2021-21631 2026-10-08T19:25:04.467989+00:00

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages.

 https://cve.radiocsirt.org/vuln/ghsa-xv69-6rf3-w5g2 GHSA-xv69-6rf3-w5g2 — Missing permission check in Jenkins Cloud Statistics Plugin 2026-10-08T19:25:04.468018+00:00

Affected: Maven: org.jenkins-ci.plugins:cloud-stats

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages.

Jenkins Cloud Statistics Plugin 0.27 requires Overall/Administer permission to access provisioning exception error messages.

 https://cve.radiocsirt.org/vuln/gsd-2021-21631 gsd-2021-21631 2026-10-08T19:25:04.468043+00:00 gsd-2021-21631