https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:43:39.692458+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0614 certfr-2025-avi-0614 — Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer une atteinte à la co… 2026-10-04T01:43:39.696322+00:00 certfr-2025-avi-0614 https://cve.radiocsirt.org/vuln/euvd-2026-250352 EUVD-2026-250352 2026-10-04T01:43:39.696365+00:00 EUVD-2026-250352 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53971 fkie_cve-2025-53971 2026-10-04T01:43:39.696399+00:00

Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint.

 https://cve.radiocsirt.org/vuln/ghsa-4276-cm8c-788h GHSA-4276-cm8c-788h — Mattermost Fails to Properly Validate Team Role Modification 2026-10-04T01:43:39.696440+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server/v5, Go: github.com/mattermost/mattermost-server/v6

Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1625 WID-SEC-W-2025-1625 — Mattermost Server und Plugins: Mehrere Schwachstellen 2026-10-04T01:43:39.696468+00:00

Ein authentifizierter Angreifer mit bestimmten Berechtigungen kann diese Schwachstellen ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebige Dateien in das Dateisystem einzubringen und potenziell beliebigen Code auszuführen.