https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:25:56.872884+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348982 EUVD-2026-348982 2026-10-10T19:25:56.929718+00:00 EUVD-2026-348982 https://cve.radiocsirt.org/vuln/fkie_cve-2026-70436 fkie_cve-2026-70436 2026-10-10T19:25:56.929761+00:00

Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to read files in workspaces they are not authorized to access.

 https://cve.radiocsirt.org/vuln/ghsa-w8fh-xx7f-5j67 GHSA-w8fh-xx7f-5j67 2026-10-10T19:25:56.929796+00:00

Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to read files in workspaces they are not authorized to access.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2665 WID-SEC-W-2026-2665 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-10T19:25:56.929814+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren sowie Cross-Site-Scripting- (XSS) oder Server-Side-Request-Forgery- (SSRF) Angriffe durchzuführen.