https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:30:02.156694+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238534 EUVD-2026-238534 2026-10-03T15:30:02.159948+00:00 EUVD-2026-238534 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43426 fkie_cve-2022-43426 2026-10-03T15:30:02.159981+00:00

Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.

 https://cve.radiocsirt.org/vuln/ghsa-mf4p-wjrm-cmjp GHSA-mf4p-wjrm-cmjp — AWS secrets displayed without masking by Jenkins S3 Explorer Plugin 2026-10-03T15:30:02.160013+00:00

Affected: Maven: io.jenkins.plugins:s3explorer

S3 Explorer Plugin stores AWS_SECRET_ACCESS_KEY in its global configuration file `s3explorer.xml` on the Jenkins controller as part of its configuration.

While this secret is stored encrypted on disk, in S3 Explorer Plugin 1.0.8 and earlier the global configuration form does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.

 https://cve.radiocsirt.org/vuln/gsd-2022-43426 gsd-2022-43426 2026-10-03T15:30:02.160041+00:00 gsd-2022-43426 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1804 WID-SEC-W-2022-1804 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T15:30:02.160054+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.