https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:08:33.158699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329854 EUVD-2026-329854 2026-10-05T08:08:33.163884+00:00 EUVD-2026-329854 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57300 fkie_cve-2026-57300 2026-10-05T08:08:33.163917+00:00

A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they can access.

 https://cve.radiocsirt.org/vuln/ghsa-mpff-xhg4-vr45 GHSA-mpff-xhg4-vr45 — Jenkins MCP Server Plugin missing a permission check 2026-10-05T08:08:33.163947+00:00

Affected: Maven: io.jenkins.plugins:mcp-server

Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier does not perform a permission check in the getReplayScripts MCP tool that returns the replay script of a Pipeline build.

This allows attackers with Item/Read permission to obtain the Pipeline script of jobs.

MCP Server Plugin 0.178.vffe5a_e770f3b_ requires Item/Extended Read permission to return the replay script of a Pipeline build through the getReplayScripts MCP tool.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074 WID-SEC-W-2026-2074 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T08:08:33.163973+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.