https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:51:46.620893+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211562 EUVD-2026-211562 2026-10-02T20:51:46.623646+00:00 EUVD-2026-211562 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24401 fkie_cve-2025-24401 2026-10-02T20:51:46.623678+00:00

Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.

 https://cve.radiocsirt.org/vuln/ghsa-969g-rq57-c79h GHSA-969g-rq57-c79h — Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin 2026-10-02T20:51:46.623709+00:00

Affected: Maven: io.jenkins.plugins:folder-auth

Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0175 WID-SEC-W-2025-0175 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-02T20:51:46.623733+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder erhöhte Rechte zu erlangen.