https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:41:10.359744+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260058 EUVD-2026-260058 2026-10-15T14:41:10.362514+00:00 EUVD-2026-260058 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58459 fkie_cve-2025-58459 2026-10-15T14:41:10.362545+00:00

Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs.

 https://cve.radiocsirt.org/vuln/ghsa-gm8g-fh49-qq6v GHSA-gm8g-fh49-qq6v — Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated 2026-10-15T14:41:10.362574+00:00

Affected: Maven: org.jenkins-ci.plugins:global-build-stats

Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs.

This has been patched in version 347.v32a_eb_0493c4f.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1966 WID-SEC-W-2025-1966 — Jenkins Plugins: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2026-10-15T14:41:10.362599+00:00

Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in Jenkins-Plugins ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.