https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:10:21.462210+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-53971 CVE-2025-53971 — Channel and Team Membership APIs inadvertently allow loss of Member privileges. 2026-10-07T04:10:21.463764+00:00

Affected: Mattermost

Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint.