https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:51:39.863671+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238596 EUVD-2026-238596 2026-10-03T17:51:39.929262+00:00 EUVD-2026-238596 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43424 fkie_cve-2022-43424 2026-10-03T17:51:39.929300+00:00

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

 https://cve.radiocsirt.org/vuln/ghsa-mfcw-83qg-4vw3 GHSA-mfcw-83qg-4vw3 — Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin 2026-10-03T17:51:39.929336+00:00

Affected: Maven: com.compuware.jenkins:compuware-xpediter-code-coverage

Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed.

It allows attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

This vulnerability is only exploitable in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. See the [LTS upgrade guide](https://www.jenkins.io/doc/upgrade-guide/2.303/#upgrading-to-jenkins-lts-2-303-3).

Compuware Xpediter Code Coverage Plugin 1.0.8 restricts execution of the agent/controller message to agents.

 https://cve.radiocsirt.org/vuln/gsd-2022-43424 gsd-2022-43424 2026-10-03T17:51:39.929367+00:00 gsd-2022-43424 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1804 WID-SEC-W-2022-1804 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T17:51:39.929381+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.