https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:21:57.008284+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-226174 EUVD-2026-226174 2026-10-04T11:21:57.011454+00:00 EUVD-2026-226174 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28155 fkie_cve-2024-28155 2026-10-04T11:21:57.011483+00:00

Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.

 https://cve.radiocsirt.org/vuln/ghsa-xxv9-w5hm-328j GHSA-xxv9-w5hm-328j — Jenkins AppSpider Plugin missing permission checks 2026-10-04T11:21:57.011513+00:00

Affected: Maven: com.rapid7:jenkinsci-appspider-plugin

Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.

 https://cve.radiocsirt.org/vuln/gsd-2024-28155 gsd-2024-28155 2026-10-04T11:21:57.011537+00:00 gsd-2024-28155 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564 WID-SEC-W-2024-0564 — Jenkins: Mehrere Schwachstellen 2026-10-04T11:21:57.011549+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.