https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:11:03.077179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-239409 EUVD-2026-239409 2026-10-10T16:11:03.080071+00:00 EUVD-2026-239409 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47884 fkie_cve-2025-47884 2026-10-10T16:11:03.080105+00:00

In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services.

 https://cve.radiocsirt.org/vuln/ghsa-q7c3-x7hm-qq72 GHSA-q7c3-x7hm-qq72 — Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens 2026-10-10T16:11:03.080138+00:00

Affected: Maven: io.jenkins.plugins:oidc-provider

In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1052 WID-SEC-W-2025-1052 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-10T16:11:03.080163+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins-Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen