https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:22:27.232035+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09267 bdu:2026-09267 2026-10-03T02:22:27.235195+00:00 bdu:2026-09267 https://cve.radiocsirt.org/vuln/euvd-2026-319938 EUVD-2026-319938 2026-10-03T02:22:27.235241+00:00 EUVD-2026-319938 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4858 fkie_cve-2026-4858 2026-10-03T02:22:27.235256+00:00

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL.. Mattermost Advisory ID: MMSA-2026-00640

 https://cve.radiocsirt.org/vuln/ghsa-c4r7-j7pp-r8mp GHSA-c4r7-j7pp-r8mp — Mattermost has a Path Traversal issue 2026-10-03T02:22:27.235287+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL. Mattermost Advisory ID: MMSA-2026-00640.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1173 WID-SEC-W-2026-1173 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T02:22:27.235313+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.