https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:20:32.909813+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0614 certfr-2025-avi-0614 — Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer une atteinte à la co… 2026-10-04T03:20:32.962801+00:00 certfr-2025-avi-0614 https://cve.radiocsirt.org/vuln/euvd-2026-250322 EUVD-2026-250322 2026-10-04T03:20:32.962841+00:00 EUVD-2026-250322 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36530 fkie_cve-2025-36530 2026-10-04T03:20:32.962857+00:00

Mattermost versions 10.9.x <= 10.9.1, 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-gq3r-5833-5532 GHSA-gq3r-5833-5532 — Mattermost Fails to Validate File Paths 2026-10-04T03:20:32.962888+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server/v5, Go: github.com/mattermost/mattermost-server/v6

Mattermost versions 10.9.x <= 10.9.1, 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1625 WID-SEC-W-2025-1625 — Mattermost Server und Plugins: Mehrere Schwachstellen 2026-10-04T03:20:32.962920+00:00

Ein authentifizierter Angreifer mit bestimmten Berechtigungen kann diese Schwachstellen ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebige Dateien in das Dateisystem einzubringen und potenziell beliebigen Code auszuführen.