https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:09:20.325039+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-13363 bdu:2025-13363 2026-10-04T13:09:20.391155+00:00 bdu:2025-13363 https://cve.radiocsirt.org/vuln/bit-jenkins-2025-59476 BIT-jenkins-2025-59476 2026-10-04T13:09:20.391195+00:00

Affected: Bitnami: jenkins

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

 https://cve.radiocsirt.org/vuln/euvd-2026-260064 EUVD-2026-260064 2026-10-04T13:09:20.391249+00:00 EUVD-2026-260064 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59476 fkie_cve-2025-59476 2026-10-04T13:09:20.391264+00:00

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

 https://cve.radiocsirt.org/vuln/ghsa-qrh5-jg98-cr48 GHSA-qrh5-jg98-cr48 — Jenkins has a log message injection vulnerability 2026-10-04T13:09:20.391287+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

In Jenkins 2.527 and earlier, LTS 2.516.2 and earlier, the log formatter that prepares log messages for console output (including `jenkins.log` and equivalent) does not restrict or transform the characters that can be inserted from user-specified content in log messages.

This allows attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

Jenkins 2.528, LTS 2.516.3 adds an indicator at the beginning of a line that was inserted as part of log message content: `[CR]`, `[LF]`, or `[CRLF]` (representing the kind of line break), followed by `>` .

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2086 WID-SEC-W-2025-2086 — Jenkins: Mehrere Schwachstellen 2026-10-04T13:09:20.391315+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Dateien zu manipulieren.