https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:40:17.312339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-370018 EUVD-2026-370018 2026-10-03T21:40:17.358150+00:00 EUVD-2026-370018 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92127 fkie_cve-2026-92127 2026-10-03T21:40:17.358188+00:00

Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer permission copies the item, or updates that configuration through the REST API or CLI, allowing attackers able to define classpath entries to execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/ghsa-433w-6m38-6gf6 GHSA-433w-6m38-6gf6 2026-10-03T21:40:17.358223+00:00

Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer permission copies the item, or updates that configuration through the REST API or CLI, allowing attackers able to define classpath entries to execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3428 WID-SEC-W-2026-3428 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T21:40:17.358240+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Daten offenzulegen und zu manipulieren, Server-Side Request Forgery (SSRF) durchzuführen, Cross-Site-Scripting-Angriffe auszuführen oder über offene Weiterleitungen Phishing-Angriffe durchzuführen.