https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:19:46.823120+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-189194 EUVD-2026-189194 2026-10-04T07:19:46.826232+00:00 EUVD-2026-189194 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41937 fkie_cve-2023-41937 2026-10-04T07:19:46.826261+00:00

Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload.

 https://cve.radiocsirt.org/vuln/ghsa-vrpg-c7c4-8mpx GHSA-vrpg-c7c4-8mpx — SSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentials 2026-10-04T07:19:46.826291+00:00

Affected: Maven: io.jenkins.plugins:bitbucket-push-and-pull-request

Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload.

 https://cve.radiocsirt.org/vuln/gsd-2023-41937 gsd-2023-41937 2026-10-04T07:19:46.826316+00:00 gsd-2023-41937 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2286 WID-SEC-W-2023-2286 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T07:19:46.826329+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.