https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:19:52.812537+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-369933 EUVD-2026-369933 2026-10-03T14:19:52.858645+00:00 EUVD-2026-369933 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92139 fkie_cve-2026-92139 2026-10-03T14:19:52.858680+00:00

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload.

 https://cve.radiocsirt.org/vuln/ghsa-767h-c3h2-x2j4 GHSA-767h-c3h2-x2j4 2026-10-03T14:19:52.858713+00:00

Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3428 WID-SEC-W-2026-3428 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T14:19:52.858730+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Daten offenzulegen und zu manipulieren, Server-Side Request Forgery (SSRF) durchzuführen, Cross-Site-Scripting-Angriffe auszuführen oder über offene Weiterleitungen Phishing-Angriffe durchzuführen.