https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:21:26.260063+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0752 certfr-2026-avi-0752 — De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Elles permettent à un attaquant de provoq… 2026-10-04T08:21:26.308025+00:00 certfr-2026-avi-0752 https://cve.radiocsirt.org/vuln/euvd-2026-335790 EUVD-2026-335790 2026-10-04T08:21:26.308066+00:00 EUVD-2026-335790 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9820 fkie_cve-2026-9820 2026-10-04T08:21:26.308081+00:00

Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sanitize team objects returned by the scheme teams endpoint, which allows a user with the User Manager role to obtain invite links for private teams and use them to join or share access to those teams via the scheme teams API endpoint.. Mattermost Advisory ID: MMSA-2026-00671

 https://cve.radiocsirt.org/vuln/ghsa-qvqh-cmq6-xvfq GHSA-qvqh-cmq6-xvfq 2026-10-04T08:21:26.308112+00:00

Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sanitize team objects returned by the scheme teams endpoint, which allows a user with the User Manager role to obtain invite links for private teams and use them to join or share access to those teams via the scheme teams API endpoint.. Mattermost Advisory ID: MMSA-2026-00671

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1932 WID-SEC-W-2026-1932 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T08:21:26.308129+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.