https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:26:13.658888+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2026-84650 BIT-jenkins-2026-84650 2026-10-02T14:26:13.661945+00:00

Affected: Bitnami: jenkins

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used.

 https://cve.radiocsirt.org/vuln/euvd-2026-371508 EUVD-2026-371508 2026-10-02T14:26:13.661992+00:00 EUVD-2026-371508 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84650 fkie_cve-2026-84650 2026-10-02T14:26:13.662009+00:00

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used.

 https://cve.radiocsirt.org/vuln/ghsa-6q2p-xwgj-7xw4 GHSA-6q2p-xwgj-7xw4 2026-10-02T14:26:13.662032+00:00

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3166 WID-SEC-W-2026-3166 — Jenkins: Mehrere Schwachstellen 2026-10-02T14:26:13.662047+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins und verschiedenen Plugins ausnutzen, um Daten offenzulegen oder zu manipulieren, Cross-Site Scripting (XSS) durchzuführen, beliebigen Code auszuführen oder die Sitzung eines anderen Benutzers zu übernehmen.