https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T05:03:17.102489+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2026-70430 BIT-jenkins-2026-70430 2026-10-10T05:03:17.106999+00:00

Affected: Bitnami: jenkins

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those intended for configuration only by administrators.

 https://cve.radiocsirt.org/vuln/euvd-2026-348995 EUVD-2026-348995 2026-10-10T05:03:17.107056+00:00 EUVD-2026-348995 https://cve.radiocsirt.org/vuln/fkie_cve-2026-70430 fkie_cve-2026-70430 2026-10-10T05:03:17.107073+00:00

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those intended for configuration only by administrators.

 https://cve.radiocsirt.org/vuln/ghsa-xv7v-hw45-9jgw GHSA-xv7v-hw45-9jgw 2026-10-10T05:03:17.107098+00:00

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those intended for configuration only by administrators.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2665 WID-SEC-W-2026-2665 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-10T05:03:17.107114+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren sowie Cross-Site-Scripting- (XSS) oder Server-Side-Request-Forgery- (SSRF) Angriffe durchzuführen.