https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:34:04.440069+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15341 bdu:2026-15341 2026-10-12T06:34:04.443812+00:00 bdu:2026-15341 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53436 BIT-jenkins-2026-53436 2026-10-12T06:34:04.443839+00:00

Affected: Bitnami: jenkins

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.

 https://cve.radiocsirt.org/vuln/euvd-2026-326417 EUVD-2026-326417 2026-10-12T06:34:04.443868+00:00 EUVD-2026-326417 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53436 fkie_cve-2026-53436 2026-10-12T06:34:04.443882+00:00

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.

 https://cve.radiocsirt.org/vuln/ghsa-3rqh-hch3-jhpc GHSA-3rqh-hch3-jhpc — Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL 2026-10-12T06:34:04.443901+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884 WID-SEC-W-2026-1884 — Jenkins: Mehrere Schwachstellen 2026-10-12T06:34:04.443922+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.