https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:15:37.067746+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193930 EUVD-2026-193930 2026-10-04T15:15:37.071077+00:00 EUVD-2026-193930 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40344 fkie_cve-2023-40344 2026-10-04T15:15:37.071108+00:00

A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-3fqw-j7x8-g75j GHSA-3fqw-j7x8-g75j — Jenkins Delphix Plugin missing permission check 2026-10-04T15:15:37.071138+00:00

Affected: Maven: org.jenkins-ci.plugins:delphix

Jenkins Delphix Plugin 3.0.2 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of credentials IDs in Delphix Plugin 3.0.3 requires the appropriate permissions.

 https://cve.radiocsirt.org/vuln/gsd-2023-40344 gsd-2023-40344 2026-10-04T15:15:37.071165+00:00 gsd-2023-40344 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088 WID-SEC-W-2023-2088 — Jenkins: Mehrere Schwachstellen 2026-10-04T15:15:37.071178+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.