https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:29:21.664597+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-45314 cnvd-2024-45314 2026-10-04T17:29:21.764777+00:00 cnvd-2024-45314 https://cve.radiocsirt.org/vuln/euvd-2026-200694 EUVD-2026-200694 2026-10-04T17:29:21.764833+00:00 EUVD-2026-200694 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42000 fkie_cve-2024-42000 2026-10-04T17:29:21.764862+00:00

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 and 10.0.x <= 10.0.0 fail to properly authorize the requests to /api/v4/channels  which allows a User or System Manager, with "Read Groups" permission but with no access for channels to retrieve details about private channels that they were not a member of by sending a request to /api/v4/channels.

 https://cve.radiocsirt.org/vuln/ghsa-hpq2-jq6g-6g73 GHSA-hpq2-jq6g-6g73 2026-10-04T17:29:21.764915+00:00

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 and 10.0.x <= 10.0.0 fail to properly authorize the requests to /api/v4/channels  which allows a User or System Manager, with "Read Groups" permission but with no access for channels to retrieve details about private channels that they were not a member of by sending a request to /api/v4/channels.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3051 WID-SEC-W-2024-3051 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T17:29:21.764950+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.