https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T20:00:18.999723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15239 bdu:2025-15239 2026-10-18T20:00:19.002783+00:00 bdu:2025-15239 https://cve.radiocsirt.org/vuln/euvd-2026-262014 EUVD-2026-262014 2026-10-18T20:00:19.002818+00:00 EUVD-2026-262014 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12559 fkie_cve-2025-12559 2026-10-18T20:00:19.002833+00:00

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

 https://cve.radiocsirt.org/vuln/ghsa-4g87-9x45-cx2h GHSA-4g87-9x45-cx2h — Mattermost fails to sanitize team email addresses 2026-10-18T20:00:19.002864+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2463 WID-SEC-W-2025-2463 — Mattermost Server: Mehrere Schwachstellen 2026-10-18T20:00:19.002918+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mattermost Server ausnutzen, um Informationen offenzulegen und einen nicht näher spezifizierten Angriff durchzuführen.