https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:24:45.181914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05630 bdu:2026-05630 2026-10-05T13:24:45.186746+00:00 bdu:2026-05630 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0446 certfr-2026-avi-0446 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Certaines d'entre elles permettent à un attaqua… 2026-10-05T13:24:45.186782+00:00 certfr-2026-avi-0446 https://cve.radiocsirt.org/vuln/euvd-2026-291383 EUVD-2026-291383 2026-10-05T13:24:45.186801+00:00 EUVD-2026-291383 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27769 fkie_cve-2026-27769 2026-10-05T13:24:45.186814+00:00

Mattermost versions 10.11.x <= 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API.. Mattermost Advisory ID: MMSA-2026-00603

 https://cve.radiocsirt.org/vuln/ghsa-mxxh-fmjq-j6x4 GHSA-mxxh-fmjq-j6x4 — Mattermost doesn't validate whether users were correctly owned by the correct Connected Workspace 2026-10-05T13:24:45.186842+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 10.11.x <= 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API. Mattermost Advisory ID: MMSA-2026-00603.