https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:37:36.999438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-59161 CVE-2025-59161 — In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malici… 2026-10-06T23:37:37.015287+00:00

Affected: element-hq element-web

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated attacker-supplied room. While the effect of this is temporary, it may still confuse users into acting on incorrect assumptions. The issue has been patched and users should upgrade to 1.11.112. A reload/refresh will fix the incorrect room list state, removing the attacker's room and restoring the original room.