https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:35:07.485983+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05583 bdu:2026-05583 2026-10-03T12:35:07.556373+00:00 bdu:2026-05583 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-27100 BIT-jenkins-2026-27100 2026-10-03T12:35:07.556412+00:00

Affected: Bitnami: jenkins

Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.

 https://cve.radiocsirt.org/vuln/euvd-2026-268804 EUVD-2026-268804 2026-10-03T12:35:07.556444+00:00 EUVD-2026-268804 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27100 fkie_cve-2026-27100 2026-10-03T12:35:07.556457+00:00

Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.

 https://cve.radiocsirt.org/vuln/ghsa-wfhp-qgm8-5p5c GHSA-wfhp-qgm8-5p5c — Jenkins has a build information disclosure vulnerability through Run Parameter 2026-10-03T12:35:07.556478+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.

 https://cve.radiocsirt.org/vuln/rhsa-2026:10199 RHSA-2026:10199 — Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.21 security update. 2026-10-03T12:35:07.556499+00:00

jose4j: jose4j: Denial of Service via malicious JSON Web Encryption (JWE) token compression org.jenkins-ci.main/jenkins-core: Jenkins: Stored Cross-site Scripting (XSS) via unescaped user-provided offline cause description org.jenkins-ci.main/jenkins-core: Jenkins: Information disclosure via unauthorized access to build parameters jenkins: Jenkins: Arbitrary file write and potential code execution through crafted archives

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0456 WID-SEC-W-2026-0456 — Jenkins: Mehrere Schwachstellen 2026-10-03T12:35:07.556519+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.