https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:56:06.561579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-290147 EUVD-2026-290147 2026-10-08T22:56:06.564380+00:00 EUVD-2026-290147 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24661 fkie_cve-2026-24661 2026-10-08T22:56:06.564418+00:00

Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00611

 https://cve.radiocsirt.org/vuln/ghsa-5rfv-h47g-xj42 GHSA-5rfv-h47g-xj42 — Mattermost MS Teams plugin doesn't limit the request body size on the /changes webhook endpoint 2026-10-08T22:56:06.564463+00:00

Affected: Go: github.com/mattermost/mattermost-plugin-msteams

Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00611.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0692 WID-SEC-W-2026-0692 — Mattermost MS Teams plugin: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-08T22:56:06.564509+00:00

Ein Angreifer kann mehrere Schwachstellen im Mattermost MS Teams plugin ausnutzen, um einen Denial of Service Angriff durchzuführen.