https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T12:35:43.165758+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-264358 EUVD-2026-264358 2026-10-19T12:35:43.250829+00:00 EUVD-2026-264358 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13767 fkie_cve-2025-13767 2026-10-19T12:35:43.250880+00:00

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.

 https://cve.radiocsirt.org/vuln/ghsa-fmqf-pmcm-8cx9 GHSA-fmqf-pmcm-8cx9 — Mattermost doesn't validate user channel membership when attaching Mattermost posts as comments to Jira issues 2026-10-19T12:35:43.250938+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2712 WID-SEC-W-2025-2712 — Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-19T12:35:43.250994+00:00

Ein Angreifer kann eine Schwachstelle in Mattermost ausnutzen, um Informationen offenzulegen.