https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:42:02.918183+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201493 EUVD-2026-201493 2026-10-05T05:42:02.925050+00:00 EUVD-2026-201493 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52549 fkie_cve-2024-52549 2026-10-05T05:42:02.925083+00:00

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-jv82-75fh-23r7 GHSA-jv82-75fh-23r7 — Missing permission check in Jenkins Script Security Plugin 2026-10-05T05:42:02.925114+00:00

Affected: Maven: org.jenkins-ci.plugins:script-security

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system. This allows attackers with Overall/Read permission to check for the existence of files on the controller file system. Script Security Plugin 1368.vb_b_402e3547e7 requires Overall/Administer permission for the affected form validation method.

 https://cve.radiocsirt.org/vuln/rhsa-2025:2218 RHSA-2025:2218 — Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 Openshift Jenkins security update 2026-10-05T05:42:02.925140+00:00

com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream json-lib: Mishandling of an unbalanced comment string in json-lib jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability jenkins-plugin/workflow-cps: Lack of Approval Check for Rebuilt Jenkins Pipelines jenkins-plugin/pipeline-model-definition: Jenkins Pipeline Declarative Plugin Allows Restart of Builds with Unapproved Jenkinsfile

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3456 WID-SEC-W-2024-3456 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T05:42:02.925164+00:00

Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.