https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:36:57.308393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-354336 EUVD-2026-354336 2026-10-04T14:36:57.369394+00:00 EUVD-2026-354336 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15754 fkie_cve-2026-15754 2026-10-04T14:36:57.369431+00:00

Mattermost versions 11.7.x <= 11.7.6, 11.8.x <= 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC (attribute-based access control) policy assignments from channels outside their team via the policy unassign API after a channel has been moved to another team.. Mattermost Advisory ID: MMSA-2026-00718

 https://cve.radiocsirt.org/vuln/ghsa-mg83-f953-3vq5 GHSA-mg83-f953-3vq5 2026-10-04T14:36:57.369467+00:00

Mattermost versions 11.7.x <= 11.7.6, 11.8.x <= 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC (attribute-based access control) policy assignments from channels outside their team via the policy unassign API after a channel has been moved to another team.. Mattermost Advisory ID: MMSA-2026-00718

 https://cve.radiocsirt.org/vuln/ncsc-2026-0305 NCSC-2026-0305 — Kwetsbaarheden verholpen in Mattermost 2026-10-04T14:36:57.369487+00:00 NCSC-2026-0305 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2411 WID-SEC-W-2026-2411 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T14:36:57.369516+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.