https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:21:35.547825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-79940 cnvd-2022-79940 2026-10-03T01:21:35.612815+00:00 cnvd-2022-79940 https://cve.radiocsirt.org/vuln/euvd-2026-195600 EUVD-2026-195600 2026-10-03T01:21:35.612867+00:00 EUVD-2026-195600 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29052 fkie_cve-2022-29052 2026-10-03T01:21:35.612882+00:00

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-vhxq-9mpv-gj87 GHSA-vhxq-9mpv-gj87 — Private key stored in plain text by Jenkins Google Compute Engine Plugin 2026-10-03T01:21:35.612916+00:00

Affected: Maven: org.jenkins-ci.plugins:google-compute-engine

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent `config.xml` files on the Jenkins controller where they can be viewed by users with Agent/Extended Read permission, or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2022-29052 gsd-2022-29052 2026-10-03T01:21:35.612940+00:00 gsd-2022-29052 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0265 WID-SEC-W-2022-0265 — Jenkins: Mehrere Schwachstellen 2026-10-03T01:21:35.612953+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und Dateien zu manipulieren.