https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:25:26.287582+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14573 CVE-2025-14573 — Team Admin Bypass of Invite Permissions via allow_open_invite Field 2026-10-08T05:25:26.303604+00:00

Affected: Mattermost

Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561