https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T04:41:21.035977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260093 EUVD-2026-260093 2026-10-10T04:41:21.038737+00:00 EUVD-2026-260093 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64148 fkie_cve-2025-64148 2026-10-10T04:41:21.038768+00:00

A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-v549-7pm5-f8qr GHSA-v549-7pm5-f8qr — Jenkins Publish to Bitbucket Plugin is missing a permissions check 2026-10-10T04:41:21.038798+00:00

Affected: Maven: org.jenkins-ci.plugins:publish-to-bitbucket

Jenkins Publish to Bitbucket Plugin 0.4 and earlier does not perform a permission check in a method implementing form validation.

This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2443 WID-SEC-W-2025-2443 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-10T04:41:21.038824+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und serverseitige Request-Forgery durchzuführen