https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:35:19.062167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193928 EUVD-2026-193928 2026-10-05T05:35:19.147676+00:00 EUVD-2026-193928 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40345 fkie_cve-2023-40345 2026-10-05T05:35:19.147718+00:00

Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.

 https://cve.radiocsirt.org/vuln/ghsa-wwww-xvm2-62w7 GHSA-wwww-xvm2-62w7 — Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials 2026-10-05T05:35:19.147767+00:00

Affected: Maven: org.jenkins-ci.plugins:delphix

Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration.

This allows attackers with Overall/Read permission to access and capture credentials they are not entitled to.

Delphix Plugin 3.0.3 defines the appropriate context for credentials lookup.

 https://cve.radiocsirt.org/vuln/gsd-2023-40345 gsd-2023-40345 2026-10-05T05:35:19.147797+00:00 gsd-2023-40345 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088 WID-SEC-W-2023-2088 — Jenkins: Mehrere Schwachstellen 2026-10-05T05:35:19.147810+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.