CVE-2026-56241: Improper Authorization

Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted superadmin users retain access to deletenoncompliantbundles and countnoncompliantbundles RPCs due to stale orgusers.userright column not being cleared during role binding deletion. Attackers can exploit this by...

GHSA-J52R-PMQV-WM38 Missing permission check in Jenkins Support Core Plugin

A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles...

CVE-2019-16539

A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles...

PT-2019-14695 · Jenkins · Jenkins Support Core Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Support Core Plugin versions 2.63 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to delete support bundles. Recommendations: For Jenkins Support Core Plugin versions 2.6...