https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:22:05.585125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01992 bdu:2024-01992 2026-10-04T10:22:05.588639+00:00 bdu:2024-01992 https://cve.radiocsirt.org/vuln/euvd-2026-217357 EUVD-2026-217357 2026-10-04T10:22:05.588679+00:00 EUVD-2026-217357 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28151 fkie_cve-2024-28151 2026-10-04T10:22:05.588695+00:00

Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it.

 https://cve.radiocsirt.org/vuln/ghsa-478x-m3mx-7j3f GHSA-478x-m3mx-7j3f — Jenkins HTML Publisher Plugin Path traversal vulnerability 2026-10-04T10:22:05.588727+00:00

Affected: Maven: org.jenkins-ci.plugins:htmlpublisher

Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it.

 https://cve.radiocsirt.org/vuln/gsd-2024-28151 gsd-2024-28151 2026-10-04T10:22:05.588753+00:00 gsd-2024-28151 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564 WID-SEC-W-2024-0564 — Jenkins: Mehrere Schwachstellen 2026-10-04T10:22:05.588765+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.