https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:02:08.727600+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0614 certfr-2025-avi-0614 — Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer une atteinte à la co… 2026-10-04T04:02:08.731371+00:00 certfr-2025-avi-0614 https://cve.radiocsirt.org/vuln/euvd-2026-250351 EUVD-2026-250351 2026-10-04T04:02:08.731406+00:00 EUVD-2026-250351 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8023 fkie_cve-2025-8023 2026-10-04T04:02:08.731421+00:00

Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fails to sanitize path traversal sequences in template file destination paths, which allows a system admin to perform path traversal attacks via malicious path components, potentially enabling malicious file placement outside intended directories.

 https://cve.radiocsirt.org/vuln/ghsa-x67c-v8jr-p29r GHSA-x67c-v8jr-p29r — Mattermost Fails to Sanitize Path Traversal Sequences 2026-10-04T04:02:08.731449+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server/v5, Go: github.com/mattermost/mattermost-server/v6

Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fails to sanitize path traversal sequences in template file destination paths, which allows a system admin to perform path traversal attacks via malicious path components, potentially enabling malicious file placement outside intended directories.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1625 WID-SEC-W-2025-1625 — Mattermost Server und Plugins: Mehrere Schwachstellen 2026-10-04T04:02:08.731478+00:00

Ein authentifizierter Angreifer mit bestimmten Berechtigungen kann diese Schwachstellen ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebige Dateien in das Dateisystem einzubringen und potenziell beliebigen Code auszuführen.