https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:17:38.949585+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0888 certfr-2025-avi-0888 — De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Elles permettent à un attaquant de provoq… 2026-10-05T09:17:38.954497+00:00 certfr-2025-avi-0888 https://cve.radiocsirt.org/vuln/euvd-2026-260750 EUVD-2026-260750 2026-10-05T09:17:38.954536+00:00 EUVD-2026-260750 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11777 fkie_cve-2025-11777 2026-10-05T09:17:38.954552+00:00

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API which allows users from one team to access user metadata and channel membership information from other teams via the API endpoint

 https://cve.radiocsirt.org/vuln/ghsa-mqcj-8c2g-h97q GHSA-mqcj-8c2g-h97q — Mattermost Incorrect Authorization vulnerability 2026-10-05T09:17:38.954606+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost, Go: github.com/mattermost/mattermost-server/v5, Go: github.com/mattermost/mattermost-server/v6

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API, which allows users from one team to access user metadata and channel membership information from other teams via the API endpoint.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2315 WID-SEC-W-2025-2315 — Mattermost Server und Mobile: Mehrere Schwachstellen 2026-10-05T09:17:38.954640+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost Server und Mobile ausnutzen, um Informationen offenzulegen oder einen Denial of Service zu verursachen.