https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T13:59:09.138631+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15345 bdu:2026-15345 2026-10-12T13:59:09.142283+00:00 bdu:2026-15345 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53441 BIT-jenkins-2026-53441 2026-10-12T13:59:09.142310+00:00

Affected: Bitnami: jenkins

Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

 https://cve.radiocsirt.org/vuln/euvd-2026-333314 EUVD-2026-333314 2026-10-12T13:59:09.142340+00:00 EUVD-2026-333314 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53441 fkie_cve-2026-53441 2026-10-12T13:59:09.142354+00:00

Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-93qh-vwrm-c5pw GHSA-93qh-vwrm-c5pw — Jenkins: Stored XSS vulnerability in node offline cause description 2026-10-12T13:59:09.142374+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884 WID-SEC-W-2026-1884 — Jenkins: Mehrere Schwachstellen 2026-10-12T13:59:09.142395+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.