https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:20:42.054699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-217414 EUVD-2026-217414 2026-10-03T01:20:42.058405+00:00 EUVD-2026-217414 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34147 fkie_cve-2024-34147 2026-10-03T01:20:42.058442+00:00

Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-94pr-w968-h923 GHSA-94pr-w968-h923 — Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext 2026-10-03T01:20:42.058483+00:00

Affected: Maven: org.jenkins-ci.plugins:telegrambot

Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file `jenkinsci.plugins.telegrambot.TelegramBotGlobalConfiguration.xml` on the Jenkins controller as part of its configuration.

This token can be viewed by users with access to the Jenkins controller file system.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1018 WID-SEC-W-2024-1018 — Jenkins: Mehrere Schwachstellen 2026-10-03T01:20:42.058527+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code im Kontext des Dienstes auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.