https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T06:55:37.351976+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-1899 EUVD-2026-1899 2026-10-22T06:55:37.354967+00:00 EUVD-2026-1899 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2447 fkie_cve-2024-2447 2026-10-22T06:55:37.355012+00:00

Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenticate the source of certain types of post actions, allowing an authenticated attacker to create posts as other users via a crafted post action.

 https://cve.radiocsirt.org/vuln/ghsa-wp43-vprh-c3w5 GHSA-wp43-vprh-c3w5 — Mattermost fails to authenticate the source of certain types of post actions 2026-10-22T06:55:37.355059+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenticate the source of certain types of post actions, allowing an authenticated attacker to create posts as other users via a crafted post action.

 https://cve.radiocsirt.org/vuln/gsd-2024-2447 gsd-2024-2447 2026-10-22T06:55:37.355105+00:00 gsd-2024-2447