https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:30:01.801298+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329855 EUVD-2026-329855 2026-10-05T23:30:01.854097+00:00 EUVD-2026-329855 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57296 fkie_cve-2026-57296 2026-10-05T23:30:01.854133+00:00

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can lead to remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-hrmj-8fm9-cg8x GHSA-hrmj-8fm9-cg8x — Jenkins External Workspace Manager Plugin has a path traversal vulnerability 2026-10-05T23:30:01.854168+00:00

Affected: Maven: org.jenkins-ci.plugins:external-workspace-manager

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject `..` path segments when validating the custom workspace path provided to the `exwsAllocate` Pipeline step, allowing the resulting workspace path to escape the configured disk mount point.

This allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can lead to remote code execution (see Reading Files).

External Workspace Manager Plugin 1.4.0 rejects `..` path segments when validating the custom workspace path, and additionally verifies that the requested path is contained within the configured disk mount point before serving it through the external workspace browse functionality.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074 WID-SEC-W-2026-2074 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T23:30:01.854198+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.