https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:46:04.976468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0813 certfr-2026-avi-0813 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un… 2026-10-03T06:46:05.055746+00:00 certfr-2026-avi-0813 https://cve.radiocsirt.org/vuln/euvd-2026-335858 EUVD-2026-335858 2026-10-03T06:46:05.055785+00:00 EUVD-2026-335858 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9597 fkie_cve-2026-9597 2026-10-03T06:46:05.055800+00:00

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional session via a magic-link token issued prior to deactivation.. Mattermost Advisory ID: MMSA-2026-00681

 https://cve.radiocsirt.org/vuln/ghsa-42ff-p8fr-h5jr GHSA-42ff-p8fr-h5jr 2026-10-03T06:46:05.055832+00:00

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional session via a magic-link token issued prior to deactivation.. Mattermost Advisory ID: MMSA-2026-00681

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2107 WID-SEC-W-2026-2107 — Mattermost Server: Mehrere Schwachstellen 2026-10-03T06:46:05.055849+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost Server ausnutzen, um Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder andere, nicht näher spezifizierte Angriffe durchzuführen.