https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:22:17.316177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-17782 EUVD-2026-17782 2026-10-03T05:22:17.420728+00:00 EUVD-2026-17782 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34181 fkie_cve-2022-34181 2026-10-03T05:22:17.420768+00:00

Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.

 https://cve.radiocsirt.org/vuln/ghsa-298j-9q4w-6rm4 GHSA-298j-9q4w-6rm4 — Agent-to-controller security bypass in Jenkins xUnit Plugin 2026-10-03T05:22:17.420800+00:00

Affected: Maven: org.jenkins-ci.plugins:xunit

xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn’t exist, and parsing files inside it as test results.

This allows attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.

xUnit Plugin 3.1.0 changes the message type from agent-to-controller to controller-to-agent, preventing execution on the controller.

 https://cve.radiocsirt.org/vuln/gsd-2022-34181 gsd-2022-34181 2026-10-03T05:22:17.420833+00:00 gsd-2022-34181 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 WID-SEC-W-2022-0445 — Jenkins: Mehrere Schwachstellen 2026-10-03T05:22:17.420846+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.