https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T20:05:53.272069+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-08221 cnvd-2022-08221 2026-10-15T20:05:53.331016+00:00 cnvd-2022-08221 https://cve.radiocsirt.org/vuln/euvd-2026-13198 EUVD-2026-13198 2026-10-15T20:05:53.331054+00:00 EUVD-2026-13198 https://cve.radiocsirt.org/vuln/fkie_cve-2022-20614 fkie_cve-2022-20614 2026-10-15T20:05:53.331068+00:00

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

 https://cve.radiocsirt.org/vuln/ghsa-558x-h7rg-997v GHSA-558x-h7rg-997v — Incorrect Permission Assignment for Critical Resource in Jenkins Mailer Plugin 2026-10-15T20:05:53.331097+00:00

Affected: Maven: org.jenkins-ci.plugins:mailer

Jenkins Mailer Plugin prior to 408.vd726a_1130320 and 1.34.2 does not perform a permission check in a method implementing form validation.

This allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Mailer Plugin 408.vd726a_1130320 and 1.34.2 requires POST requests and Overall/Administer permission for the affected form validation method.

 https://cve.radiocsirt.org/vuln/gsd-2022-20614 gsd-2022-20614 2026-10-15T20:05:53.331125+00:00 gsd-2022-20614