https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:47:26.800376+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0632 certfr-2026-avi-0632 — De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Elles permettent à un attaquant de provoq… 2026-10-05T23:47:26.873658+00:00 certfr-2026-avi-0632 https://cve.radiocsirt.org/vuln/euvd-2026-327293 EUVD-2026-327293 2026-10-05T23:47:26.873701+00:00 EUVD-2026-327293 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6517 fkie_cve-2026-6517 2026-10-05T23:47:26.873717+00:00

Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that routes to an external web server. Mattermost Advisory ID: MMSA-2026-00651

 https://cve.radiocsirt.org/vuln/ghsa-2wmq-3m94-g4jr GHSA-2wmq-3m94-g4jr 2026-10-05T23:47:26.873749+00:00

Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that routes to an external web server. Mattermost Advisory ID: MMSA-2026-00651