https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:04:27.585597+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-370014 EUVD-2026-370014 2026-10-02T10:04:27.630121+00:00 EUVD-2026-370014 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92128 fkie_cve-2026-92128 2026-10-02T10:04:27.630155+00:00

Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the classpath entries from the second, allowing attackers able to define classpath entries to execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/ghsa-5gc7-28q4-677m GHSA-5gc7-28q4-677m 2026-10-02T10:04:27.630188+00:00

Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the classpath entries from the second, allowing attackers able to define classpath entries to execute arbitrary code in the context of the Jenkins controller JVM.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3428 WID-SEC-W-2026-3428 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-02T10:04:27.630206+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Daten offenzulegen und zu manipulieren, Server-Side Request Forgery (SSRF) durchzuführen, Cross-Site-Scripting-Angriffe auszuführen oder über offene Weiterleitungen Phishing-Angriffe durchzuführen.