https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:43:23.475980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-1122 certfr-2025-avi-1122 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer de… 2026-10-07T22:43:23.479024+00:00 certfr-2025-avi-1122 https://cve.radiocsirt.org/vuln/euvd-2026-264357 EUVD-2026-264357 2026-10-07T22:43:23.479063+00:00 EUVD-2026-264357 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64641 fkie_cve-2025-64641 2026-10-07T22:43:23.479078+00:00

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts

 https://cve.radiocsirt.org/vuln/ghsa-vww6-79rv-3j4x GHSA-vww6-79rv-3j4x — Mattermost doesn't verify that post actions invoking `/share-issue-publicly` were created by the Jira plugin 2026-10-07T22:43:23.479108+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2685 WID-SEC-W-2025-2685 — Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-07T22:43:23.479135+00:00

Ein Angreifer kann eine Schwachstelle in Mattermost ausnutzen, um Informationen offenzulegen.