https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:55:46.664352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0220 certfr-2025-avi-0220 — Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer un problème de sécur… 2026-10-04T07:55:46.668414+00:00 certfr-2025-avi-0220 https://cve.radiocsirt.org/vuln/euvd-2026-230652 EUVD-2026-230652 2026-10-04T07:55:46.668464+00:00 EUVD-2026-230652 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27538 fkie_cve-2025-27538 2026-10-04T07:55:46.668480+00:00

Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to enforce MFA checks in PUT /api/v4/users/user-id/mfa when the requesting user differs from the target user ID, which allows users with edit_other_users permission to activate or deactivate MFA for other users, even if those users have not set up MFA.

 https://cve.radiocsirt.org/vuln/ghsa-j5jw-m2ph-3jjf GHSA-j5jw-m2ph-3jjf — Mattermost Missing Authentication for Critical Function 2026-10-04T07:55:46.668512+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to enforce MFA checks in PUT /api/v4/users/user-id/mfa when the requesting user differs from the target user ID, which allows users with edit_other_users permission to activate or deactivate MFA for other users, even if those users have not set up MFA.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15017-1 openSUSE-SU-2025:15017-1 — govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media 2026-10-04T07:55:46.668538+00:00

govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0579 WID-SEC-W-2025-0579 — Mattermost Server: Mehrere Schwachstellen 2026-10-04T07:55:46.668562+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Informationen offenzulegen.