https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:18:08.900482+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-322125 EUVD-2026-322125 2026-10-09T01:18:08.903196+00:00 EUVD-2026-322125 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48916 fkie_cve-2026-48916 2026-10-09T01:18:08.903240+00:00

Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.

 https://cve.radiocsirt.org/vuln/ghsa-fmjp-mw89-c6h6 GHSA-fmjp-mw89-c6h6 — Jenkins LDAP Plugin follows LDAP referrals 2026-10-09T01:18:08.903271+00:00

Affected: Maven: org.jenkins-ci.plugins:ldap

Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals from the configured LDAP server. These can forward to an RMI URL that causes Jenkins to deserialize attacker-controlled data, resulting in Remote Code Execution (RCE) on the Jenkins controller if deserialization "gadgets" are available on the classpath.

This allows attackers able to control the configured LDAP server, or able to perform a machine-in-the-middle attack, to execute code on the Jenkins controller.

LDAP Plugin 807.809.vd3a_4e5e4ec98 no longer follows LDAP referrals.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1707 WID-SEC-W-2026-1707 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-09T01:18:08.903301+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.