https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:53:36.175545+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2455 EUVD-2026-2455 2026-10-04T04:53:36.179237+00:00 EUVD-2026-2455 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4198 fkie_cve-2024-4198 2026-10-04T04:53:36.179278+00:00

Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-5qx9-9ffj-5r8f GHSA-5qx9-9ffj-5r8f — Mattermost fails to fully validate role changes 2026-10-04T04:53:36.179317+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.

 https://cve.radiocsirt.org/vuln/gsd-2024-4198 gsd-2024-4198 2026-10-04T04:53:36.179352+00:00 gsd-2024-4198 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0718 WID-SEC-W-2024-0718 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T04:53:36.179371+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.