https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:03:38.072486+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06558 bdu:2026-06558 2026-10-03T12:03:38.141611+00:00 bdu:2026-06558 https://cve.radiocsirt.org/vuln/euvd-2026-276240 EUVD-2026-276240 2026-10-03T12:03:38.141646+00:00 EUVD-2026-276240 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22545 fkie_cve-2026-22545 2026-10-03T12:03:38.141661+00:00

Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type switch which allows an authenticated attacker to change account password without confirmation via falsely claiming a different auth provider.. Mattermost Advisory ID: MMSA-2026-00583

 https://cve.radiocsirt.org/vuln/ghsa-rv67-7w2g-7976 GHSA-rv67-7w2g-7976 — Mattermost fails to validate user's authentication method when processing account auth type switch 2026-10-03T12:03:38.141700+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server

Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type switch which allows an authenticated attacker to change account password without confirmation via falsely claiming a different auth provider.. Mattermost Advisory ID: MMSA-2026-00583

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0422 WID-SEC-W-2026-0422 — Mattermost: Mehrere Schwachstellen 2026-10-03T12:03:38.141731+00:00

Ein authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um falsche Informationen anzuzeigen, Informationen offenzulegen, Sicherheitskontrollen zu umgehen und eine Denial-of-Service-Situation zu erzeugen.