https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:01:33.570973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0052 certfr-2026-avi-0052 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un… 2026-10-06T07:01:33.576145+00:00 certfr-2026-avi-0052 https://cve.radiocsirt.org/vuln/euvd-2026-268308 EUVD-2026-268308 2026-10-06T07:01:33.576183+00:00 EUVD-2026-268308 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22892 fkie_cve-2026-22892 2026-10-06T07:01:33.576198+00:00

Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to via the /create-issue API endpoint by providing the post ID of an inaccessible post.. Mattermost Advisory ID: MMSA-2025-00550

 https://cve.radiocsirt.org/vuln/ghsa-9pj7-jh2r-87g8 GHSA-9pj7-jh2r-87g8 — Mattermost doesn't validate user permissions when creating Jira issues from Mattermost posts 2026-10-06T07:01:33.576228+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creating Jira issues from Mattermost posts, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to via the /create-issue API endpoint by providing the post ID of an inaccessible post.. Mattermost Advisory ID: MMSA-2025-00550