https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:39:48.571523+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04259 bdu:2023-04259 2026-10-04T15:39:48.761530+00:00 bdu:2023-04259 https://cve.radiocsirt.org/vuln/euvd-2026-199869 EUVD-2026-199869 2026-10-04T15:39:48.761582+00:00 EUVD-2026-199869 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37946 fkie_cve-2023-37946 2026-10-04T15:39:48.761607+00:00

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.

 https://cve.radiocsirt.org/vuln/ghsa-rwg5-2pv9-633w GHSA-rwg5-2pv9-633w — Jenkins OpenShift Login Plugin session fixation vulnerability 2026-10-04T15:39:48.761649+00:00

Affected: Maven: org.openshift.jenkins:openshift-login

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the existing session on login.

This allows attackers to use social engineering techniques to gain administrator access to Jenkins.

OpenShift Login Plugin 1.1.0.230.v5d7030b_f5432 invalidates the existing session on login.

 https://cve.radiocsirt.org/vuln/gsd-2023-37946 gsd-2023-37946 2026-10-04T15:39:48.761698+00:00 gsd-2023-37946 https://cve.radiocsirt.org/vuln/rhsa-2024:0775 RHSA-2024:0775 — Red Hat Security Advisory: jenkins and jenkins-2-plugins security update 2026-10-04T15:39:48.761728+00:00

SnakeYaml: Constructor Deserialization Remote Code Execution maven-shared-utils: Command injection via Commandline class apache-commons-text: variable interpolation RCE jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin jenkins-2-plugins/pipeline-build-step: Stored XSS vulnerability in Pipeline: Build Step Plugin Jenkins: Temporary file parameter created with insecure permissions Jenkins: Information disclosure through error stack traces related to agents Jenkins: Session fixation vulnerability in OpenShift Login Plugin jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE jenkins: cross-site WebSocket hijacking

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1743 WID-SEC-W-2023-1743 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T15:39:48.761800+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.