https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 04:14:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15342 bdu:2026-15342 https://cve.radiocsirt.org/vuln/bdu:2026-15342 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53438 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53438 https://cve.radiocsirt.org/vuln/euvd-2026-326414 EUVD-2026-326414 https://cve.radiocsirt.org/vuln/euvd-2026-326414 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53438 <p>A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.</p> <p>A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53438 https://cve.radiocsirt.org/vuln/ghsa-mw82-xcg6-gx79 <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.</p> https://cve.radiocsirt.org/vuln/ghsa-mw82-xcg6-gx79 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884