https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:21:59.649914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07548 bdu:2026-07548 2026-10-04T10:21:59.676772+00:00 bdu:2026-07548 https://cve.radiocsirt.org/vuln/euvd-2026-320028 EUVD-2026-320028 2026-10-04T10:21:59.676816+00:00 EUVD-2026-320028 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3473 fkie_cve-2026-3473 2026-10-04T10:21:59.676833+00:00

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.. Mattermost Advisory ID: MMSA-2026-00620

 https://cve.radiocsirt.org/vuln/ghsa-7pf2-9c95-w332 GHSA-7pf2-9c95-w332 — Mattermost doesn't validate file ownership and access control 2026-10-04T10:21:59.676866+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs. Mattermost Advisory ID: MMSA-2026-00620.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1243 WID-SEC-W-2026-1243 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T10:21:59.676896+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.