https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T23:01:45.430542+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280561 EUVD-2026-280561 2026-10-19T23:01:45.433641+00:00 EUVD-2026-280561 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3524 fkie_cve-2026-3524 2026-10-19T23:01:45.433681+00:00

Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin's endpoints. Mattermost Advisory ID: MMSA-2026-00621

 https://cve.radiocsirt.org/vuln/ghsa-h7g6-pq3g-f7cw GHSA-h7g6-pq3g-f7cw 2026-10-19T23:01:45.433719+00:00

Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin's endpoints. Mattermost Advisory ID: MMSA-2026-00621

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0625 WID-SEC-W-2026-0625 — Mattermost-Plugin "Legal Hold": Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-19T23:01:45.433737+00:00

Ein Angreifer kann eine Schwachstelle im Mattermost-Plugin "Legal Hold" ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.