https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:19:59.361440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-3611 CVE-2025-3611 — Improper Access Control in Mattermost allows System Managers to view team details despite role restrictions 2026-10-05T17:19:59.420651+00:00

Affected: Mattermost

Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have access to via direct API requests to team endpoints, even when explicitly configured with 'No access' to Teams in the System Console.