https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:47:14.379127+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06567 bdu:2026-06567 2026-10-03T22:47:14.443727+00:00 bdu:2026-06567 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0173 certfr-2026-avi-0173 — De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Elles permettent à un attaquant de provoq… 2026-10-03T22:47:14.443761+00:00 certfr-2026-avi-0173 https://cve.radiocsirt.org/vuln/euvd-2026-276308 EUVD-2026-276308 2026-10-03T22:47:14.443779+00:00 EUVD-2026-276308 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2462 fkie_cve-2026-2462 2026-10-03T22:47:14.443791+00:00

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an unauthenticated attacker to achieve remote code execution and exfiltrate sensitive configuration data including AWS and SMTP credentials via uploading a malicious plugin after changing the import directory. Mattermost Advisory ID: MMSA-2025-00528

 https://cve.radiocsirt.org/vuln/ghsa-fprx-ppqr-8wgf GHSA-fprx-ppqr-8wgf 2026-10-03T22:47:14.443820+00:00

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an unauthenticated attacker to achieve remote code execution and exfiltrate sensitive configuration data including AWS and SMTP credentials via uploading a malicious plugin after changing the import directory. Mattermost Advisory ID: MMSA-2025-00528

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0422 WID-SEC-W-2026-0422 — Mattermost: Mehrere Schwachstellen 2026-10-03T22:47:14.443838+00:00

Ein authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um falsche Informationen anzuzeigen, Informationen offenzulegen, Sicherheitskontrollen zu umgehen und eine Denial-of-Service-Situation zu erzeugen.