https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:59:43.842481+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-08318 bdu:2025-08318 2026-10-05T21:59:43.904550+00:00 bdu:2025-08318 https://cve.radiocsirt.org/vuln/euvd-2026-260001 EUVD-2026-260001 2026-10-05T21:59:43.904587+00:00 EUVD-2026-260001 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53663 fkie_cve-2025-53663 2026-10-05T21:59:43.904602+00:00

Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-pgrx-5f8q-r5mq GHSA-pgrx-5f8q-r5mq — Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens 2026-10-05T21:59:43.904634+00:00

Affected: Maven: com.ibm.devops:ibm-cloud-devops

Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.

These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1521 WID-SEC-W-2025-1521 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T21:59:43.904662+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.