Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:29:49 +0000 bdu:2026-15344 https://cve.radiocsirt.org/vuln/bdu:2026-15344 bdu:2026-15344 https://cve.radiocsirt.org/vuln/bdu:2026-15344 BIT-jenkins-2026-53440 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53440 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53440 EUVD-2026-326389 https://cve.radiocsirt.org/vuln/euvd-2026-326389 EUVD-2026-326389 https://cve.radiocsirt.org/vuln/euvd-2026-326389 fkie_cve-2026-53440 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53440 <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53440 GHSA-92m7-4fpw-2wxm — Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container" https://cve.radiocsirt.org/vuln/ghsa-92m7-4fpw-2wxm <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> https://cve.radiocsirt.org/vuln/ghsa-92m7-4fpw-2wxm WID-SEC-W-2026-1884 — Jenkins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884