https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:39:28.661632+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15962 bdu:2025-15962 2026-10-03T00:39:28.725781+00:00 bdu:2025-15962 https://cve.radiocsirt.org/vuln/euvd-2026-263094 EUVD-2026-263094 2026-10-03T00:39:28.725824+00:00 EUVD-2026-263094 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67640 fkie_cve-2025-67640 2026-10-03T00:39:28.725846+00:00

Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.

 https://cve.radiocsirt.org/vuln/ghsa-v8hg-m323-jvjq GHSA-v8hg-m323-jvjq — Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin 2026-10-03T00:39:28.725891+00:00

Affected: Maven: org.jenkins-ci.plugins:git-client

Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2819 WID-SEC-W-2025-2819 — Jenkins: Mehrere Schwachstellen 2026-10-03T00:39:28.725930+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder Cross-Site-Scripting-Angriffe durchzuführen.