https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:10:23.626071+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0752 certfr-2026-avi-0752 — De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Elles permettent à un attaquant de provoq… 2026-10-03T23:10:23.630839+00:00 certfr-2026-avi-0752 https://cve.radiocsirt.org/vuln/euvd-2026-335942 EUVD-2026-335942 2026-10-03T23:10:23.630909+00:00 EUVD-2026-335942 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9708 fkie_cve-2026-9708 2026-10-03T23:10:23.630932+00:00

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate that an assigned incoming webhook user has access to the target team or channel, which allows a requester with webhook management permissions to create posts or direct messages attributed to another user via crafted incoming webhook configuration and payloads.. Mattermost Advisory ID: MMSA-2026-00683

 https://cve.radiocsirt.org/vuln/ghsa-8jmp-2xx6-pjg7 GHSA-8jmp-2xx6-pjg7 2026-10-03T23:10:23.630980+00:00

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate that an assigned incoming webhook user has access to the target team or channel, which allows a requester with webhook management permissions to create posts or direct messages attributed to another user via crafted incoming webhook configuration and payloads.. Mattermost Advisory ID: MMSA-2026-00683

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1932 WID-SEC-W-2026-1932 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T23:10:23.631007+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.