https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:54:20.777061+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-04249 bdu:2026-04249 2026-10-08T13:54:20.780502+00:00 bdu:2026-04249 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-33002 BIT-jenkins-2026-33002 2026-10-08T13:54:20.780532+00:00

Affected: Bitnami: jenkins

Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable to DNS rebinding attacks that allow bypassing origin validation.

 https://cve.radiocsirt.org/vuln/euvd-2026-276566 EUVD-2026-276566 2026-10-08T13:54:20.780564+00:00 EUVD-2026-276566 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33002 fkie_cve-2026-33002 2026-10-08T13:54:20.780577+00:00

Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable to DNS rebinding attacks that allow bypassing origin validation.

 https://cve.radiocsirt.org/vuln/ghsa-phhv-63fh-rrc8 GHSA-phhv-63fh-rrc8 — Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation 2026-10-08T13:54:20.780598+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable to DNS rebinding attacks that allow bypassing origin validation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0779 WID-SEC-W-2026-0779 — Jenkins: Mehrere Schwachstellen 2026-10-08T13:54:20.780619+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.