<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 16:02:51 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-53437</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2026-53437</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Jenkins Project Jenkins, Red Hat OpenShift Developer Tools and Services 4.12, Red Hat OpenShift Developer Tools and Services 4.13, Red Hat OpenShift Developer Tools and Services 4.14, Red Hat OpenShift Developer Tools and Services 4.15, Red Hat OpenShift Developer Tools and Services 4.16, Red Hat OpenShift Developer Tools and Services 4.17, Red Hat OpenShift Developer Tools and Services 4.18, Red Hat OpenShift Developer Tools and Services 4.19, Red Hat OpenShift Developer Tools and Services 4.20 and 2 more&lt;/p&gt;
&lt;p&gt;Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Jenkins Project Jenkins, Red Hat OpenShift Developer Tools and Services 4.12, Red Hat OpenShift Developer Tools and Services 4.13, Red Hat OpenShift Developer Tools and Services 4.14, Red Hat OpenShift Developer Tools and Services 4.15, Red Hat OpenShift Developer Tools and Services 4.16, Red Hat OpenShift Developer Tools and Services 4.17, Red Hat OpenShift Developer Tools and Services 4.18, Red Hat OpenShift Developer Tools and Services 4.19, Red Hat OpenShift Developer Tools and Services 4.20 and 2 more&lt;/p&gt;
&lt;p&gt;Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing attacks.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2026-53437</guid>
    </item>
  </channel>
</rss>
