https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:10:48.013280+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-189196 EUVD-2026-189196 2026-10-04T10:10:48.017970+00:00 EUVD-2026-189196 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41935 fkie_cve-2023-41935 2026-10-04T10:10:48.018003+00:00

Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce.

 https://cve.radiocsirt.org/vuln/ghsa-hj7p-h74j-6gxj GHSA-hj7p-h74j-6gxj — Non-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) Plugin 2026-10-04T10:10:48.018034+00:00

Affected: Maven: org.jenkins-ci.plugins:azure-ad

Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce.

 https://cve.radiocsirt.org/vuln/gsd-2023-41935 gsd-2023-41935 2026-10-04T10:10:48.018059+00:00 gsd-2023-41935 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2286 WID-SEC-W-2023-2286 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T10:10:48.018071+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.