https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:58:12.876479+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-1628 CVE-2026-1628 — Mattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites. 2026-10-08T15:58:12.895872+00:00

Affected: Mattermost

Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Mattermost app which allows a malicious server to expose preload script functionality to untrusted servers via having a user open an external link in their Mattermost server. Mattermost Advisory ID: MMSA-2026-00596