https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T16:16:37.920367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-65353 cnvd-2022-65353 2026-10-18T16:16:37.926359+00:00 cnvd-2022-65353 https://cve.radiocsirt.org/vuln/euvd-2026-206458 EUVD-2026-206458 2026-10-18T16:16:37.926394+00:00 EUVD-2026-206458 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1332 fkie_cve-2022-1332 2026-10-18T16:16:37.926409+00:00

One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents.

 https://cve.radiocsirt.org/vuln/ghsa-qggc-pj29-j27m GHSA-qggc-pj29-j27m — Improper Privilege Management in Mattermost 2026-10-18T16:16:37.926437+00:00

Affected: Go: github.com/mattermost/mattermost-server/v6, Go: github.com/mattermost/mattermost-server/v5

One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents. Per the Mattermost security updates page, versions 6.4.2, 6.3.5, 6.2.5, and 5.37.9 contain patches for this issue

 https://cve.radiocsirt.org/vuln/gsd-2022-1332 gsd-2022-1332 2026-10-18T16:16:37.926463+00:00 gsd-2022-1332