https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:35:30.191683+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-1122 certfr-2025-avi-1122 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer de… 2026-10-07T17:35:30.253504+00:00 certfr-2025-avi-1122 https://cve.radiocsirt.org/vuln/euvd-2026-264219 EUVD-2026-264219 2026-10-07T17:35:30.253555+00:00 EUVD-2026-264219 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14273 fkie_cve-2025-14273 2026-10-07T17:35:30.253571+00:00

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0 fail to enforce authentication and issue-key path restrictions in the Jira plugin, which allows an unauthenticated attacker who knows a valid user ID to issue authenticated GET and POST requests to the Jira server via crafted plugin payloads that spoof the user ID and inject arbitrary issue key paths. Mattermost Advisory ID: MMSA-2025-00555

 https://cve.radiocsirt.org/vuln/ghsa-qvmc-92vg-6r35 GHSA-qvmc-92vg-6r35 — Mattermost with Jira plugin enabled has Incorrect Implementation of Authentication Algorithm 2026-10-07T17:35:30.253605+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-plugin-jira

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0 fail to enforce authentication and issue-key path restrictions in the Jira plugin, which allows an unauthenticated attacker who knows a valid user ID to issue authenticated GET and POST requests to the Jira server via crafted plugin payloads that spoof the user ID and inject arbitrary issue key paths. Mattermost Advisory ID: MMSA-2025-00555

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2913 WID-SEC-W-2025-2913 — Mattermost: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-07T17:35:30.253636+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mattermost ausnutzen, um Sicherheitsvorkehrungen zu umgehen.