https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:45:24.451148+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-250354 EUVD-2026-250354 2026-10-04T05:45:24.495256+00:00 EUVD-2026-250354 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47700 fkie_cve-2025-47700 2026-10-04T05:45:24.495290+00:00

Mattermost Server versions 10.5.x <= 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions

 https://cve.radiocsirt.org/vuln/ghsa-vqwh-5jhh-vc9p GHSA-vqwh-5jhh-vc9p — Mattermost Server SSRF Vulnerability via the Agents Plugin 2026-10-04T05:45:24.495322+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8

Mattermost Server versions 10.5.x <= 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1625 WID-SEC-W-2025-1625 — Mattermost Server und Plugins: Mehrere Schwachstellen 2026-10-04T05:45:24.495350+00:00

Ein authentifizierter Angreifer mit bestimmten Berechtigungen kann diese Schwachstellen ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebige Dateien in das Dateisystem einzubringen und potenziell beliebigen Code auszuführen.