https://vulnerability.circl.lu/sightings/feed 2026-08-30T13:36:26.556369+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ee37ef6f-6eb0-43a0-a604-2c6b8549d4ba/export 2026-08-30T13:36:26.583790+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ee37ef6f-6eb0-43a0-a604-2c6b8549d4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msrcbmtv622n", "content": "CVE-2026-19429 is trending. Hype score 2, currently #9 on cvemon.\n\nJenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink destinations but not targets. The CVE-2026-33001 fix enforces\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19429", "creation_timestamp": "2026-08-10T23:53:23.245050Z"} 2026-08-10T23:53:23.245050+00:00 https://vulnerability.circl.lu/sighting/450cee4b-0878-43dd-bd8d-aeb33d9e7e71/export 2026-08-30T13:36:26.586447+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "450cee4b-0878-43dd-bd8d-aeb33d9e7e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqgt4gzcu2u", "content": "CVE-2026-19429 - jenkins\nA security patch for Jenkins Project Jenkins is incomplete, allowing an authenticated attacker to access sensitive files on the server. This can happen because the patch does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jenkins #jenkinsproject #CVE #infosec", "creation_timestamp": "2026-08-10T15:42:05.043999Z"} 2026-08-10T15:42:05.043999+00:00