https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:42:36.706331+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-01412 cnvd-2016-01412 2026-10-07T21:42:36.713093+00:00 cnvd-2016-01412 https://cve.radiocsirt.org/vuln/euvd-2026-81619 EUVD-2026-81619 2026-10-07T21:42:36.713131+00:00 EUVD-2026-81619 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0792 fkie_cve-2016-0792 2026-10-07T21:42:36.713145+00:00

Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.

 https://cve.radiocsirt.org/vuln/ghsa-45rg-g72w-r393 GHSA-45rg-g72w-r393 — Jenkins allows Deserialization of Untrusted Data via an XML File 2026-10-07T21:42:36.713173+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.

 https://cve.radiocsirt.org/vuln/gsd-2016-0792 gsd-2016-0792 2026-10-07T21:42:36.713197+00:00 gsd-2016-0792 https://cve.radiocsirt.org/vuln/rhsa-2016:0711 RHSA-2016:0711 — Red Hat Security Advisory: jenkins security update 2026-10-07T21:42:36.713208+00:00

jenkins: Remote code execution vulnerability in remoting module (SECURITY-232) jenkins: HTTP response splitting vulnerability (SECURITY-238) jenkins: Non-constant time comparison of API token (SECURITY-241) jenkins: Non-constant time comparison of CSRF crumbs (SECURITY-245) jenkins: Remote code execution through remote API (SECURITY-247)