https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:14:58.250368+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0614 certfr-2025-avi-0614 — Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer une atteinte à la co… 2026-10-04T07:14:58.432272+00:00 certfr-2025-avi-0614 https://cve.radiocsirt.org/vuln/euvd-2026-250376 EUVD-2026-250376 2026-10-04T07:14:58.432318+00:00 EUVD-2026-250376 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6465 fkie_cve-2025-6465 2026-10-04T07:14:58.432345+00:00

Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 10.10.x <= 10.10.0, 10.9.x <= 10.9.3 fail to sanitize file names which allows users with file upload permission to overwrite file attachment thumbnails via path traversal in file streaming APIs.

 https://cve.radiocsirt.org/vuln/ghsa-pj6f-rc94-gw53 GHSA-pj6f-rc94-gw53 — Mattermost Fails to Sanitize File Names 2026-10-04T07:14:58.432392+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 10.10.x <= 10.10.0, 10.9.x <= 10.9.3 fail to sanitize file names which allows users with file upload permission to overwrite file attachment thumbnails via path traversal in file streaming APIs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1625 WID-SEC-W-2025-1625 — Mattermost Server und Plugins: Mehrere Schwachstellen 2026-10-04T07:14:58.432440+00:00

Ein authentifizierter Angreifer mit bestimmten Berechtigungen kann diese Schwachstellen ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebige Dateien in das Dateisystem einzubringen und potenziell beliebigen Code auszuführen.