https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:10:23.813856+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329839 EUVD-2026-329839 2026-10-05T03:10:23.817465+00:00 EUVD-2026-329839 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57288 fkie_cve-2026-57288 2026-10-05T03:10:23.817500+00:00

Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native (ADSI) authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a matching user whose password they know without knowing their exact user name.

 https://cve.radiocsirt.org/vuln/ghsa-gx55-p8g7-p3fh GHSA-gx55-p8g7-p3fh — Jenkins Active Directory Plugin has an LDAP injection vulnerability 2026-10-05T03:10:23.817533+00:00

Affected: Maven: org.jenkins-ci.plugins:active-directory

In Jenkins Active Directory Plugin 2.41.1 and earlier, the Windows native (ADSI) authentication path does not escape the user name before building the LDAP search filter.

This allows unauthenticated attackers to inject LDAP wildcard characters into the user name, enabling them to enumerate directory user and group names, and to authenticate as a matching user when they know that user’s password but not their exact user name.

Active Directory Plugin 2.41.2 escapes the user name in the Windows native (ADSI) authentication path before building the LDAP search filter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074 WID-SEC-W-2026-2074 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T03:10:23.817568+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.