https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:56:42.424312+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-333318 EUVD-2026-333318 2026-10-05T03:56:42.480694+00:00 EUVD-2026-333318 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57299 fkie_cve-2026-57299 2026-10-05T03:56:42.480730+00:00

Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.

 https://cve.radiocsirt.org/vuln/ghsa-8263-qv4g-vfxr GHSA-8263-qv4g-vfxr — Jenkins Contrast Continuous Application Security Plugin missing permission checks 2026-10-05T03:56:42.480763+00:00

Affected: Maven: org.jenkins-ci.plugins:contrast-continuous-application-security

Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier does not perform permission checks in several HTTP endpoints that fill list box options with the names of the configured Contrast metadata.

This allows attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.

Contrast Continuous Application Security Plugin 3.12 requires the appropriate permission to enumerate the configured Contrast metadata.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074 WID-SEC-W-2026-2074 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T03:56:42.480792+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.