https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:53:59.461724+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0201 certfr-2026-avi-0201 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Certaines d'entre elles permettent à un attaqua… 2026-10-06T05:53:59.465480+00:00 certfr-2026-avi-0201 https://cve.radiocsirt.org/vuln/euvd-2026-277510 EUVD-2026-277510 2026-10-06T05:53:59.465516+00:00 EUVD-2026-277510 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27656 fkie_cve-2026-27656 2026-10-06T05:53:59.465531+00:00

Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to properly validate user identity in the OpenID {{IsSameUser()}} comparison logic, which allows an attacker to take over arbitrary user accounts via an overly permissive substring matching flaw in the user discovery flow.. Mattermost Advisory ID: MMSA-2026-00590

 https://cve.radiocsirt.org/vuln/ghsa-fg35-5rf6-qg3g GHSA-fg35-5rf6-qg3g — Mattermost allows attackers to take over arbitrary user accounts via overly permissive substring matching flaw 2026-10-06T05:53:59.465565+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to properly validate user identity in the OpenID {{IsSameUser()}} comparison logic, which allows an attacker to take over arbitrary user accounts via an overly permissive substring matching flaw in the user discovery flow. Mattermost Advisory ID: MMSA-2026-00590