https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:48:57.495051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244452 EUVD-2026-244452 2026-10-02T12:48:57.498425+00:00 EUVD-2026-244452 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6149 fkie_cve-2023-6149 2026-10-02T12:48:57.498455+00:00

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data

 https://cve.radiocsirt.org/vuln/ghsa-5gwh-r76w-934h GHSA-5gwh-r76w-934h — Qualys Jenkins Plugin for WAS XML External Entity vulnerability 2026-10-02T12:48:57.498488+00:00

Affected: Maven: com.qualys.plugins:qualys-was

Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize the plugin and configure potential a rouge endpoint via which it was possible to control response for certain request which could be injected with XXE payloads leading to XXE while processing the response data

 https://cve.radiocsirt.org/vuln/gsd-2023-6149 gsd-2023-6149 2026-10-02T12:48:57.498513+00:00 gsd-2023-6149 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0058 WID-SEC-W-2024-0058 — Jenkins Plugin "Qualys Policy Compliance": Mehrere Schwachstellen 2026-10-02T12:48:57.498526+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Jenkins plugin "Qualys Policy Compliance" ausnutzen, um Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.