https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T23:19:19.644627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319247 EUVD-2026-319247 2026-10-27T23:19:19.646753+00:00 EUVD-2026-319247 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3495 fkie_cve-2026-3495 2026-10-27T23:19:19.646785+00:00

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious content during error page composition which allows an attacker with access to edit some site configuration to execute some malicious code via injecting some JS as part of those values.. Mattermost Advisory ID: MMSA-2026-00622

 https://cve.radiocsirt.org/vuln/ghsa-jx93-pf6x-874r GHSA-jx93-pf6x-874r — Mattermost doesn't escape some variables that could contain malicious content during error page composition 2026-10-27T23:19:19.646816+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious content during error page composition which allows an attacker with access to edit some site configuration to execute some malicious code via injecting some JS as part of those values.. Mattermost Advisory ID: MMSA-2026-00622