https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:32:50.622156+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04864 bdu:2022-04864 2026-10-03T10:32:50.705570+00:00 bdu:2022-04864 https://cve.radiocsirt.org/vuln/euvd-2026-18657 EUVD-2026-18657 2026-10-03T10:32:50.705609+00:00 EUVD-2026-18657 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36891 fkie_cve-2022-36891 2026-10-03T10:32:50.705624+00:00

A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with Item/Read permission but without Deploy Now/Deploy permission to read deployment logs.

 https://cve.radiocsirt.org/vuln/ghsa-rqqx-fvqx-539g GHSA-rqqx-fvqx-539g — Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs 2026-10-03T10:32:50.705656+00:00

Affected: Maven: org.jenkins-ci.plugins:deployer-framework

Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Item/Read permission to read deployment logs.

Deployer Framework Plugin 86.v7b_a_4a_55b_f3ec requires Deploy Now/Deploy permission to read deployment logs.

 https://cve.radiocsirt.org/vuln/gsd-2022-36891 gsd-2022-36891 2026-10-03T10:32:50.705684+00:00 gsd-2022-36891 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852 WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen 2026-10-03T10:32:50.705696+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren