https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 06:33:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15341 bdu:2026-15341 https://cve.radiocsirt.org/vuln/bdu:2026-15341 https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53436 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2026-53436 https://cve.radiocsirt.org/vuln/euvd-2026-326417 EUVD-2026-326417 https://cve.radiocsirt.org/vuln/euvd-2026-326417 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53436 <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53436 https://cve.radiocsirt.org/vuln/ghsa-3rqh-hch3-jhpc <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-3rqh-hch3-jhpc https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Programmcode auszuführen, sich als Benutzer auszugeben, Benutzer auf vom Angreifer kontrollierte Domänen umzuleiten, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1884