https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:06:50.255141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319068 EUVD-2026-319068 2026-10-04T21:06:50.257719+00:00 EUVD-2026-319068 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4053 fkie_cve-2026-4053 2026-10-04T21:06:50.257751+00:00

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints.. Mattermost Advisory ID: MMSA-2026-00631

 https://cve.radiocsirt.org/vuln/ghsa-hw87-6jcq-9f8q GHSA-hw87-6jcq-9f8q — Mattermost doesn't enforce the PostEditTimeLimit on non-message post fields 2026-10-04T21:06:50.257783+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints. Mattermost Advisory ID: MMSA-2026-00631.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1154 WID-SEC-W-2026-1154 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T21:06:50.257809+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.