PT-2026-49485

Name of the Vulnerable Software and Affected Versions WP Job Portal versions prior to 2.5.3 Description Cross Site Scripting XSS exists in the plugin, allowing users with the Subscriber role to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than...

CVE-2026-48880: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in WP Job Portal = 2.5.2 versions...

BIT-JENKINS-2026-53442

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to t...

qemu-kvm security update

10.1.0-17 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch RHEL-155947 RHEL-155948 - kvm-linux-aio-Put-all-parameters-into-qemulaiocb.patch RHEL-154174 - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch RHEL-154174 -...

📄 FortiSandbox 4.4.7 Authentication Bypass / Command Injection

This Metasploit auxiliary scanner module is designed to collect system and environment information from vulnerable FortiSandbox instances by leveraging two disclosed vulnerabilities: an authentication bypass and a command injection flaw. The module supports multiple collection modes, including...

CVE-2026-53442

A flaw was found in Jenkins. Secrets submitted via POST config.xml are stored unencrypted in job configuration files on the Jenkins controller. This allows users with 'Item/Extended Read' permission, or those with direct access to the Jenkins controller file system, to view sensitive information...

CVE-2026-45556

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /waf///rule//save accepts a configfilename form field that is passed straight through to configmod.masterslaveuploadandrestart... as the destination path. The validation chai...

org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.468)

org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)

org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53437 Source advisory: OSV:GHSA-463R-5M89-4XFR...

io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53441 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)

org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53441 Source advisory: SNYK:JAVA-ORGJENKINSCIMAIN-17337043...

io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)

org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53439 Source advisory: GHSA-G28P-6MCC-V4RV...

io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)

org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53436 Source advisory: GHSA-3RQH-HCH3-JHPC...

io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)

org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53438 Source advisory: GHSA-MW82-XCG6-GX79...

io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)

org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53437 Source advisory: GHSA-463R-5M89-4XFR...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

com.cloudbees.jenkins.plugins:cloudbees-registration (3.15), com.groupon.jenkins-ci.plugins:dotci (>=2.6.0, <=2.9.2) +16 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.596)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:cloudbees-registration 3.15 - com.groupon.jenkins-ci.plugins:dotc...

io.jenkins.plugins:design-library (434.v01b_a_5a_27a_53c), org.jenkins-ci.main:jenkins-war (>=2.556, <=2.567) +3 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (>=2.556, <=2.567)

org.jenkins-ci.main:jenkins-core MAVEN version =2.556, =2.556, =1573.v1465f6f78810, =878.v6f1d3b3a0769, =898.vc050ed2424ca - org.jvnet.hudson.plugins:favorite 2.267.vb90d08408081 Source cves: CVE-2026-53442 Source advisory: OSV:GHSA-M6WV-WH8G-64XC...