https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:33:29.579781+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-217358 EUVD-2026-217358 2026-10-04T14:33:29.651926+00:00 EUVD-2026-217358 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28152 fkie_cve-2024-28152 2026-10-04T14:33:29.651962+00:00

In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy "Forks in the same account" allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.

 https://cve.radiocsirt.org/vuln/ghsa-m4rm-x2rr-357w GHSA-m4rm-x2rr-357w — Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests 2026-10-04T14:33:29.651997+00:00

Affected: Maven: org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source

In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy "Forks in the same account" allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.

 https://cve.radiocsirt.org/vuln/gsd-2024-28152 gsd-2024-28152 2026-10-04T14:33:29.652032+00:00 gsd-2024-28152 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564 WID-SEC-W-2024-0564 — Jenkins: Mehrere Schwachstellen 2026-10-04T14:33:29.652046+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.