https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T15:55:03.269500+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-00047 bdu:2023-00047 2026-10-22T15:55:03.272821+00:00 bdu:2023-00047 https://cve.radiocsirt.org/vuln/euvd-2026-241533 EUVD-2026-241533 2026-10-22T15:55:03.272866+00:00 EUVD-2026-241533 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41242 fkie_cve-2022-41242 2026-10-22T15:55:03.272895+00:00

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps.

 https://cve.radiocsirt.org/vuln/ghsa-mrf6-4gw6-65v3 GHSA-mrf6-4gw6-65v3 — Jenkins extreme-feedback Plugin vulnerable to Missing Authorization 2026-10-22T15:55:03.272925+00:00

Affected: Maven: org.jenkins-ci.plugins:extreme-feedback

Jenkins extreme-feedback Plugin 1.7 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/gsd-2022-41242 gsd-2022-41242 2026-10-22T15:55:03.272951+00:00 gsd-2022-41242