https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:54:14.139024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1212 certfr-2026-avi-1212 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un… 2026-10-02T19:54:14.186923+00:00 certfr-2026-avi-1212 https://cve.radiocsirt.org/vuln/euvd-2026-374052 EUVD-2026-374052 2026-10-02T19:54:14.186963+00:00 EUVD-2026-374052 https://cve.radiocsirt.org/vuln/fkie_cve-2026-96259 fkie_cve-2026-96259 2026-10-02T19:54:14.186977+00:00

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the configured OAuth token and userinfo endpoints.. Mattermost Advisory ID: MMSA-2026-00776

 https://cve.radiocsirt.org/vuln/ghsa-j85c-qqpv-57m3 GHSA-j85c-qqpv-57m3 2026-10-02T19:54:14.187007+00:00

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the configured OAuth token and userinfo endpoints.. Mattermost Advisory ID: MMSA-2026-00776

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3519 WID-SEC-W-2026-3519 — Mattermost Server: Mehrere Schwachstellen 2026-10-02T19:54:14.187025+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Mattermost Server ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.