https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:49:46.089212+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22343 EUVD-2026-22343 2026-10-03T09:49:46.151735+00:00 EUVD-2026-22343 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21664 fkie_cve-2021-21664 2026-10-03T09:49:46.151782+00:00

An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-jm4g-8rvq-v87j GHSA-jm4g-8rvq-v87j — Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials 2026-10-03T09:49:46.151828+00:00

Affected: Maven: com.xebialabs.deployit.ci:deployit-plugin

An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.

The permission check was partially fixed in XebiaLabs XL Deploy Plugin 7.5.9: A permission check was added, but for the wrong permission, still allowing some non-admin users to access the form validation method.

 https://cve.radiocsirt.org/vuln/gsd-2021-21664 gsd-2021-21664 2026-10-03T09:49:46.151877+00:00 gsd-2021-21664