https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:13:57.375828+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07549 bdu:2026-07549 2026-10-03T23:13:57.442209+00:00 bdu:2026-07549 https://cve.radiocsirt.org/vuln/euvd-2026-321381 EUVD-2026-321381 2026-10-03T23:13:57.442252+00:00 EUVD-2026-321381 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4915 fkie_cve-2026-4915 2026-10-03T23:13:57.442267+00:00

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to filter nil elements from outgoing webhook attachment payloads before processing, which allows an authenticated user to cause a denial of service (server process termination) via a crafted webhook callback response containing a null attachment entry.. Mattermost Advisory ID: MMSA-2026-00641

 https://cve.radiocsirt.org/vuln/ghsa-5gmf-x7hg-97wf GHSA-5gmf-x7hg-97wf — Mattermost doesn't filter nil elements from outgoing webhook attachment payloads before processing 2026-10-03T23:13:57.442302+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to filter nil elements from outgoing webhook attachment payloads before processing, which allows an authenticated user to cause a denial of service (server process termination) via a crafted webhook callback response containing a null attachment entry. Mattermost Advisory ID: MMSA-2026-00641