https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:30:24.065463+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08585 bdu:2025-08585 2026-10-05T16:30:24.146009+00:00 bdu:2025-08585 https://cve.radiocsirt.org/vuln/euvd-2026-260016 EUVD-2026-260016 2026-10-05T16:30:24.146050+00:00 EUVD-2026-260016 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53678 fkie_cve-2025-53678 2026-10-05T16:30:24.146066+00:00

Jenkins User1st uTester Plugin 1.1 and earlier stores the uTester JWT token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-w4xv-mj6v-p4g2 GHSA-w4xv-mj6v-p4g2 — Jenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users 2026-10-05T16:30:24.146097+00:00

Affected: Maven: io.jenkins.plugins:user1st-utester

Jenkins User1st uTester Plugin 1.1 and earlier stores the uTester JWT token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521 WID-SEC-W-2025-1521 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T16:30:24.146123+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.