https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:01:02.423438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-187629 EUVD-2026-187629 2026-10-04T11:01:02.484943+00:00 EUVD-2026-187629 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43501 fkie_cve-2023-43501 2026-10-04T11:01:02.484979+00:00

A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.

 https://cve.radiocsirt.org/vuln/ghsa-55q6-r3hm-7ff4 GHSA-55q6-r3hm-7ff4 — Jenkins Build Failure Analyzer Plugin missing permission check 2026-10-04T11:01:02.485011+00:00

Affected: Maven: com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not perform a permission check in a connection test HTTP endpoint.

This allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.

Additionally, this HTTP endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Build Failure Analyzer Plugin 2.4.2 requires POST requests and Overall/Administer permission for the affected HTTP endpoint.

 https://cve.radiocsirt.org/vuln/gsd-2023-43501 gsd-2023-43501 2026-10-04T11:01:02.485041+00:00 gsd-2023-43501 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2411 WID-SEC-W-2023-2411 — Jenkins: Mehrere Schwachstellen 2026-10-04T11:01:02.485055+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, XSS-Angriffe durchzuführen, Dateien zu manipulieren oder Cross-Site Request Forgery-Angriffe durchzuführen.