https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:50:52.353717+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0052 certfr-2026-avi-0052 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un… 2026-10-06T14:50:52.406837+00:00 certfr-2026-avi-0052 https://cve.radiocsirt.org/vuln/euvd-2026-268727 EUVD-2026-268727 2026-10-06T14:50:52.406880+00:00 EUVD-2026-268727 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14573 fkie_cve-2025-14573 2026-10-06T14:50:52.406895+00:00

Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561

 https://cve.radiocsirt.org/vuln/ghsa-cgjg-p2m2-qm4p GHSA-cgjg-p2m2-qm4p — Mattermost fails to enforce invite permissions when updating team settings 2026-10-06T14:50:52.406925+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server

Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561