https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:24:02.010878+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-12689 CVE-2025-12689 — DoS in Calls plugin via malformed UTF-8 in WebSocket request 2026-10-07T19:24:02.027741+00:00

Affected: Mattermost

Mattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request.