https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:45:08.199399+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-236057 EUVD-2026-236057 2026-10-03T19:45:08.282016+00:00 EUVD-2026-236057 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45388 fkie_cve-2022-45388 2026-10-03T19:45:08.282057+00:00

Jenkins Config Rotator Plugin 2.0.1 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing unauthenticated attackers to read arbitrary files with '.xml' extension on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-9pqq-h9qv-28fp GHSA-9pqq-h9qv-28fp — Jenkins Config Rotator Plugin vulnerable to path traversal 2026-10-03T19:45:08.282092+00:00

Affected: Maven: org.jenkins-ci.main:config-rotator

Jenkins Config Rotator Plugin 2.0.1 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing unauthenticated attackers to read arbitrary files with '.xml' extension on the Jenkins controller file system. Currently there is no known workaround and no fix available.

 https://cve.radiocsirt.org/vuln/gsd-2022-45388 gsd-2022-45388 2026-10-03T19:45:08.282119+00:00 gsd-2022-45388 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2056 WID-SEC-W-2022-2056 — Jenkins: Mehrere Schwachstellen 2026-10-03T19:45:08.282131+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.