CVE-2026-50568

creationtimestamp| type| source ---|---|--- 2026-06-10 19:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxhj5i6c42i...

CVE-2026-50639

creationtimestamp| type| source ---|---|--- 2026-06-10 19:28:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxgzfkxhr2s...

CVE-2026-50545

creationtimestamp| type| source ---|---|--- 2026-06-10 19:26:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgurkwmi2m 2026-06-16 16:25:31+00:00| seen| https://bsky.app/profile/attrition.org/post/3mog7m2jsis2z...

CVE-2026-46618

creationtimestamp| type| source ---|---|--- 2026-06-10 19:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxg2fosui25...

CVE-2026-50567

creationtimestamp| type| source ---|---|--- 2026-06-10 19:09:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfwzd6yv24 2026-07-28 21:08:25+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mrqcyosxc22o...

CVE-2026-49824

creationtimestamp| type| source ---|---|--- 2026-06-10 19:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfttjf2f2q...

CVE-2026-0271

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:27+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfn2hejy2w 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-07-11 00:03:08+00:00| seen|...

CVE-2026-0267

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:23+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmwtg2m2k 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 22:58:09+00:00| seen|...

CVE-2026-10795

creationtimestamp| type| source ---|---|--- 2026-06-10 18:53:36+00:00| seen| https://bsky.app/profile/responsive-uk.bsky.social/post/3mnxf3bkwjk23 2026-06-11 07:29:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnypcydait2v 2026-06-11 07:30:29+00:00| seen|...

CVE-2026-24067

creationtimestamp| type| source ---|---|--- 2026-06-10 18:04:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnxcdxd5px2v...

CVE-2026-50223

creationtimestamp| type| source ---|---|--- 2026-06-10 17:49:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxbiihslu2f 2026-06-11 01:26:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny2zsqm2w2h...

CVE-2026-11603

creationtimestamp| type| source ---|---|--- 2026-06-10 16:16:17+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnx4c47w5x22...

CVE-2026-53441

creationtimestamp| type| source ---|---|--- 2026-06-10 15:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwzyzpdpy2j 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617 2026-07-22 05:00:04+00:00| seen|...

Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments ./ or ../, allowing attackers to perform phishing attacks...

Jenkins: Stored XSS vulnerability in node offline cause description

Jenkins 2.483 through 2.567 both inclusive, LTS 2.492.1 through 2.555.2 both inclusive does not escape the user-provided description of a generic offline cause that could be set through the POST config.xml API, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers...

CVE-2026-45564

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, POST /config/versions////save interpolates the URL-path configver parameter directly into a config-version path that ends up at os.systemf"dos2unix -q cfg". configver is not run...

CVE-2026-52750

creationtimestamp| type| source ---|---|--- 2026-06-10 15:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwynanusq2j 2026-06-11 02:08:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mny5f7ym472n...

CVE-2026-53441

Jenkins 2.483 through 2.567 both inclusive, LTS 2.492.1 through 2.555.2 both inclusive does not escape the user-provided description of a generic offline cause that could be set through the POST config.xml API, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers...

CVE-2026-53442

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to t...

CVE-2026-53441

Jenkins 2.483 through 2.567 both inclusive, LTS 2.492.1 through 2.555.2 both inclusive does not escape the user-provided description of a generic offline cause that could be set through the POST config.xml API, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers...