https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:53:26.265308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211550 EUVD-2026-211550 2026-10-02T20:53:26.273364+00:00 EUVD-2026-211550 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24403 fkie_cve-2025-24403 2026-10-02T20:53:26.273443+00:00

A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-gp8p-49gr-jv8j GHSA-gp8p-49gr-jv8j — Missing permission checks in Jenkins Azure Service Fabric Plugin 2026-10-02T20:53:26.273511+00:00

Affected: Maven: org.jenkins-ci.plugins:service-fabric

The Jenkins Azure Service Fabric Plugin 1.6 and earlier does not perform permission checks in several HTTP endpoints.

This allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0175 WID-SEC-W-2025-0175 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-02T20:53:26.273539+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder erhöhte Rechte zu erlangen.