https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:23:58.005380+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-2578 CVE-2026-2578 — Information Disclosure via WebSocket Event When Deleting Unrevealed Burn on Read Posts 2026-10-07T19:23:58.023741+00:00

Affected: Mattermost

Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read message contents via the WebSocket post deletion event.. Mattermost Advisory ID: MMSA-2026-00579