<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 09:05:48 +0000</lastBuildDate>
    <item>
      <title>bdu:2026-15343</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2026-15343</link>
      <description>bdu:2026-15343</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2026-15343</guid>
    </item>
    <item>
      <title>BIT-jenkins-2026-53439</title>
      <link>https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53439</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: jenkins&lt;/p&gt;
&lt;p&gt;Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users&amp;#39; configured timezone and to enumerate view names of other users&amp;#39; &amp;#34;My Views&amp;#34;.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: jenkins&lt;/p&gt;
&lt;p&gt;Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users&amp;#39; configured timezone and to enumerate view names of other users&amp;#39; &amp;#34;My Views&amp;#34;.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53439</guid>
    </item>
    <item>
      <title>EUVD-2026-326415</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-326415</link>
      <description>EUVD-2026-326415</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-326415</guid>
    </item>
    <item>
      <title>fkie_cve-2026-53439</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2026-53439</link>
      <description>&lt;p&gt;Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users&amp;#39; configured timezone and to enumerate view names of other users&amp;#39; &amp;#34;My Views&amp;#34;.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users&amp;#39; configured timezone and to enumerate view names of other users&amp;#39; &amp;#34;My Views&amp;#34;.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2026-53439</guid>
    </item>
    <item>
      <title>GHSA-g28p-6mcc-v4rv — Jenkins exposes other users' timezone and view names to users with Overall/Read permission</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-g28p-6mcc-v4rv</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: org.jenkins-ci.main:jenkins-core&lt;/p&gt;
&lt;p&gt;Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users&amp;#39; configured timezone and to enumerate view names of other users&amp;#39; &amp;#34;My Views&amp;#34;.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: org.jenkins-ci.main:jenkins-core&lt;/p&gt;
&lt;p&gt;Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users&amp;#39; configured timezone and to enumerate view names of other users&amp;#39; &amp;#34;My Views&amp;#34;.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-g28p-6mcc-v4rv</guid>
    </item>
    <item>
      <title>WID-SEC-W-2026-1884 — Jenkins: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884</link>
      <description>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben,  Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben,  Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884</guid>
    </item>
  </channel>
</rss>
