https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:18:41.259678+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-01377 cnvd-2016-01377 2026-10-07T16:18:41.301665+00:00 cnvd-2016-01377 https://cve.radiocsirt.org/vuln/euvd-2026-81625 EUVD-2026-81625 2026-10-07T16:18:41.301740+00:00 EUVD-2026-81625 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0790 fkie_cve-2016-0790 2026-10-07T16:18:41.301765+00:00

Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.

 https://cve.radiocsirt.org/vuln/ghsa-jgpr-qrw2-6gp3 GHSA-jgpr-qrw2-6gp3 — Exposure of Sensitive Information in Jenkins Core 2026-10-07T16:18:41.301808+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.

 https://cve.radiocsirt.org/vuln/gsd-2016-0790 gsd-2016-0790 2026-10-07T16:18:41.301845+00:00 gsd-2016-0790 https://cve.radiocsirt.org/vuln/rhsa-2016:0711 RHSA-2016:0711 — Red Hat Security Advisory: jenkins security update 2026-10-07T16:18:41.301864+00:00

jenkins: Remote code execution vulnerability in remoting module (SECURITY-232) jenkins: HTTP response splitting vulnerability (SECURITY-238) jenkins: Non-constant time comparison of API token (SECURITY-241) jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245) jenkins: Remote code execution through remote API (SECURITY-247)