https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T04:15:17.920249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15342 bdu:2026-15342 2026-10-12T04:15:17.923691+00:00 bdu:2026-15342 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53438 BIT-jenkins-2026-53438 2026-10-12T04:15:17.923718+00:00

Affected: Bitnami: jenkins

A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.

 https://cve.radiocsirt.org/vuln/euvd-2026-326414 EUVD-2026-326414 2026-10-12T04:15:17.923746+00:00 EUVD-2026-326414 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53438 fkie_cve-2026-53438 2026-10-12T04:15:17.923758+00:00

A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.

 https://cve.radiocsirt.org/vuln/ghsa-mw82-xcg6-gx79 GHSA-mw82-xcg6-gx79 — Jenkins: Missing permission check allows unauthorized cancellation of queue items 2026-10-12T04:15:17.923778+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884 WID-SEC-W-2026-1884 — Jenkins: Mehrere Schwachstellen 2026-10-12T04:15:17.923798+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.