https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:17:54.686292+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07534 bdu:2023-07534 2026-10-03T16:17:54.761583+00:00 bdu:2023-07534 https://cve.radiocsirt.org/vuln/euvd-2026-223644 EUVD-2026-223644 2026-10-03T16:17:54.761619+00:00 EUVD-2026-223644 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25765 fkie_cve-2023-25765 2026-10-03T16:17:54.761634+00:00

In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/ghsa-c9c2-wcxh-3w5j GHSA-c9c2-wcxh-3w5j — Sandbox escape in Jenkins Email Extension Plugin 2026-10-03T16:17:54.761665+00:00

Affected: Maven: org.jenkins-ci.plugins:email-ext

In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/gsd-2023-25765 gsd-2023-25765 2026-10-03T16:17:54.761689+00:00 gsd-2023-25765 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0397 WID-SEC-W-2023-0397 — Jenkins: Mehrere Schwachstellen 2026-10-03T16:17:54.761700+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.