https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:22:54.083052+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-307890 EUVD-2026-307890 2026-10-04T16:22:54.085816+00:00 EUVD-2026-307890 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42524 fkie_cve-2026-42524 2026-10-04T16:22:54.085848+00:00

Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-f8h4-46xv-h7jj GHSA-f8h4-46xv-h7jj — Jenkins HTML Publisher Plugin has a XSS vulnerability in the legacy wrapper file 2026-10-04T16:22:54.085879+00:00

Affected: Maven: org.jenkins-ci.plugins:htmlpublisher

Jenkins HTML Publisher Plugin versoins 427 and earlier do not escape the job name and URL in the legacy wrapper file.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

HTML Publisher Plugin 427.1 escapes job name and URL when generating the legacy wrapper file.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1320 WID-SEC-W-2026-1320 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T16:22:54.085906+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen sowie Cross-Site-Scripting- oder Phishing-Angriffe durchzuführen.