https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:40:39.599898+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08315 bdu:2025-08315 2026-10-05T15:40:39.603335+00:00 bdu:2025-08315 https://cve.radiocsirt.org/vuln/euvd-2026-260000 EUVD-2026-260000 2026-10-05T15:40:39.603365+00:00 EUVD-2026-260000 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53662 fkie_cve-2025-53662 2026-10-05T15:40:39.603379+00:00

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-jxwj-qccf-4896 GHSA-jxwj-qccf-4896 — Jenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel Keys 2026-10-05T15:40:39.603406+00:00

Affected: Maven: org.jenkins-ci.plugins:ifttt-build-notifier

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.

These keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521 WID-SEC-W-2025-1521 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T15:40:39.603431+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.