https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:19:21.100073+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329843 EUVD-2026-329843 2026-10-05T07:19:21.102904+00:00 EUVD-2026-329843 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57303 fkie_cve-2026-57303 2026-10-05T07:19:21.102960+00:00

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.

 https://cve.radiocsirt.org/vuln/ghsa-2q27-6p2h-q6r3 GHSA-2q27-6p2h-q6r3 — Jenkins Assembla Plugin has an XXE vulnerability 2026-10-05T07:19:21.103004+00:00

Affected: Maven: org.jenkins-ci.plugins:assembla

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when parsing responses from the configured Assembla server.

This allows attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074 WID-SEC-W-2026-2074 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T07:19:21.103043+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.