https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:32:47.310410+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15963 bdu:2025-15963 2026-10-02T17:32:47.374129+00:00 bdu:2025-15963 https://cve.radiocsirt.org/vuln/euvd-2026-263093 EUVD-2026-263093 2026-10-02T17:32:47.374168+00:00 EUVD-2026-263093 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67642 fkie_cve-2025-67642 2026-10-02T17:32:47.374182+00:00

Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.

 https://cve.radiocsirt.org/vuln/ghsa-3fm2-hx3h-xm4v GHSA-3fm2-hx3h-xm4v — Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials 2026-10-02T17:32:47.374213+00:00

Affected: Maven: com.datapipe.jenkins.plugins:hashicorp-vault-plugin

Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2819 WID-SEC-W-2025-2819 — Jenkins: Mehrere Schwachstellen 2026-10-02T17:32:47.374237+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder Cross-Site-Scripting-Angriffe durchzuführen.