https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T16:45:54.786099+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-05101 cnvd-2022-05101 2026-10-16T16:45:54.789907+00:00 cnvd-2022-05101 https://cve.radiocsirt.org/vuln/euvd-2026-13200 EUVD-2026-13200 2026-10-16T16:45:54.789943+00:00 EUVD-2026-13200 https://cve.radiocsirt.org/vuln/fkie_cve-2022-20616 fkie_cve-2022-20616 2026-10-16T16:45:54.789957+00:00

Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read access to validate if a credential ID refers to a secret file credential and whether it's a zip file.

 https://cve.radiocsirt.org/vuln/ghsa-gqm2-2gcx-p88w GHSA-gqm2-2gcx-p88w — Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding Plugin 2026-10-16T16:45:54.789989+00:00

Affected: Maven: org.jenkins-ci.plugins:credentials-binding

Jenkins Credentials Binding Plugin prior to 1.27.1 and 1.24.1 does not perform a permission check in a method implementing form validation.

This allows attackers with Overall/Read access to validate if a credential ID refers to a secret file credential and whether it’s a zip file.

Credentials Binding Plugin 1.27.1 and 1.24.1 performs permission checks when validating secret file credentials IDs.

 https://cve.radiocsirt.org/vuln/gsd-2022-20616 gsd-2022-20616 2026-10-16T16:45:54.790022+00:00 gsd-2022-20616