https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:09:44.379453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-17994 EUVD-2026-17994 2026-10-17T12:09:44.383659+00:00 EUVD-2026-17994 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34810 fkie_cve-2022-34810 2026-10-17T12:09:44.383721+00:00

A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-2348-ccqj-8p27 GHSA-2348-ccqj-8p27 — Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check 2026-10-17T12:09:44.383798+00:00

Affected: Maven: net.praqma:rqm-plugin

Jenkins RQM Plugin 2.8 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-34810 gsd-2022-34810 2026-10-17T12:09:44.383839+00:00 gsd-2022-34810