https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:10:14.633641+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2439 EUVD-2026-2439 2026-10-04T10:10:14.639024+00:00 EUVD-2026-2439 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4182 fkie_cve-2024-4182 2026-10-04T10:10:14.639055+00:00

Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom status values, which allows an authenticated attacker to crash other users' web clients via a malformed custom status.

 https://cve.radiocsirt.org/vuln/ghsa-8f99-g2pj-x8w3 GHSA-8f99-g2pj-x8w3 — Mattermost crashes web clients via a malformed custom status 2026-10-04T10:10:14.639086+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom status values, which allows an authenticated attacker to crash other users' web clients via a malformed custom status.

 https://cve.radiocsirt.org/vuln/gsd-2024-4182 gsd-2024-4182 2026-10-04T10:10:14.639112+00:00 gsd-2024-4182 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0718 WID-SEC-W-2024-0718 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T10:10:14.639124+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.