https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:44:08.997964+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260057 EUVD-2026-260057 2026-10-15T22:44:09.043086+00:00 EUVD-2026-260057 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58458 fkie_cve-2025-58458 2026-10-15T22:44:09.043118+00:00

In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-g2pq-9jr7-w6gv GHSA-g2pq-9jr7-w6gv — Jenkins Git client Plugin file system information disclosure vulnerability 2026-10-15T22:44:09.043148+00:00

Affected: Maven: org.jenkins-ci.plugins:git-client

In Jenkins Git client Plugin 6.3.2 and earlier, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1966 WID-SEC-W-2025-1966 — Jenkins Plugins: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2026-10-15T22:44:09.043174+00:00

Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in Jenkins-Plugins ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.