https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:56:33.027649+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319267 EUVD-2026-319267 2026-10-04T22:56:33.091049+00:00 EUVD-2026-319267 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5163 fkie_cve-2026-5163 2026-10-04T22:56:33.091092+00:00

Mattermost versions 11.5.x <= 11.5.1 fail to verify channel membership when processing AI-assisted message rewrites which allows an authenticated attacker to read the content of threads in private channels and direct messages they do not have access to via a crafted request to the post rewrite endpoint.. Mattermost Advisory ID: MMSA-2026-00645

 https://cve.radiocsirt.org/vuln/ghsa-8r89-8w26-cq32 GHSA-8r89-8w26-cq32 — Mattermost doesn't verify channel membership when processing AI-assisted message rewrites 2026-10-04T22:56:33.091129+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server

Mattermost versions 11.5.x <= 11.5.1 fail to verify channel membership when processing AI-assisted message rewrites which allows an authenticated attacker to read the content of threads in private channels and direct messages they do not have access to via a crafted request to the post rewrite endpoint.. Mattermost Advisory ID: MMSA-2026-00645

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1154 WID-SEC-W-2026-1154 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T22:56:33.091158+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.