https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:41:07.142978+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277607 EUVD-2026-277607 2026-10-05T08:41:07.200357+00:00 EUVD-2026-277607 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3115 fkie_cve-2026-3115 2026-10-05T08:41:07.200394+00:00

Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authenticated guest users to enumerate user IDs outside their allowed visibility scope via the group retrieval endpoint.. Mattermost Advisory ID: MMSA-2026-00594

 https://cve.radiocsirt.org/vuln/ghsa-mpc7-mm28-f6wq GHSA-mpc7-mm28-f6wq — Mattermost allows authenticated guest users to enumerate user IDs outside their allowed visibility scope 2026-10-05T08:41:07.200433+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which allows authenticated guest users to enumerate user IDs outside their allowed visibility scope via the group retrieval endpoint. Mattermost Advisory ID: MMSA-2026-00594.