https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:23:00.600431+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0201 certfr-2026-avi-0201 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Certaines d'entre elles permettent à un attaqua… 2026-10-06T18:23:00.623420+00:00 certfr-2026-avi-0201 https://cve.radiocsirt.org/vuln/euvd-2026-277809 EUVD-2026-277809 2026-10-06T18:23:00.623482+00:00 EUVD-2026-277809 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26233 fkie_cve-2026-26233 2026-10-06T18:23:00.623509+00:00

Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote attackers to cause denial of service (server crash and restart) via HTTP/2 single packet attack with 100+ parallel login requests.. Mattermost Advisory ID: MMSA-2025-00566

 https://cve.radiocsirt.org/vuln/ghsa-247x-7qw8-fp98 GHSA-247x-7qw8-fp98 — Mattermost doesn't rate limit login requests, allowing DoS 2026-10-06T18:23:00.623559+00:00

Affected: Go: github.com/mattermost/mattermost-server

Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote attackers to cause denial of service (server crash and restart) via HTTP/2 single packet attack with 100+ parallel login requests.. Mattermost Advisory ID: MMSA-2025-00566