https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:31:35.391442+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-204451 EUVD-2026-204451 2026-10-05T18:31:35.531576+00:00 EUVD-2026-204451 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52550 fkie_cve-2024-52550 2026-10-05T18:31:35.531622+00:00

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved.

 https://cve.radiocsirt.org/vuln/ghsa-mrpr-vr82-x88r GHSA-mrpr-vr82-x88r — Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin 2026-10-05T18:31:35.531657+00:00

Affected: Maven: org.jenkins-ci.plugins.workflow:workflow-cps

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved. This allows attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved. Pipeline: Groovy Plugin 3993.v3e20a_37282f8 refuses to rebuild a build whose main (Jenkinsfile) script is unapproved.

 https://cve.radiocsirt.org/vuln/rhsa-2025:2218 RHSA-2025:2218 — Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 Openshift Jenkins security update 2026-10-05T18:31:35.531685+00:00

com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream json-lib: Mishandling of an unbalanced comment string in json-lib jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability jenkins-plugin/workflow-cps: Lack of Approval Check for Rebuilt Jenkins Pipelines jenkins-plugin/pipeline-model-definition: Jenkins Pipeline Declarative Plugin Allows Restart of Builds with Unapproved Jenkinsfile

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3456 WID-SEC-W-2024-3456 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T18:31:35.531710+00:00

Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.