https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:25:50.389446+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-189425 EUVD-2026-189425 2026-10-04T08:25:50.392466+00:00 EUVD-2026-189425 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41945 fkie_cve-2023-41945 2026-10-04T08:25:50.392498+00:00

Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions are disabled and should not be granted.

 https://cve.radiocsirt.org/vuln/ghsa-qf42-f5vf-6w99 GHSA-qf42-f5vf-6w99 — Disabled permissions granted by Jenkins Assembla Auth Plugin 2026-10-04T08:25:50.392529+00:00

Affected: Maven: org.jenkins-ci.plugins:assembla-auth

Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions are disabled and should not be granted.

 https://cve.radiocsirt.org/vuln/gsd-2023-41945 gsd-2023-41945 2026-10-04T08:25:50.392553+00:00 gsd-2023-41945 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2286 WID-SEC-W-2023-2286 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T08:25:50.392565+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.