https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:24:19.996848+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-3114 CVE-2026-3114 — Zip Bomb Denial of Service via Unrestricted Archive Decompression 2026-10-07T19:24:20.012885+00:00

Affected: Mattermost

Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction which allows authenticated users with file upload permissions to cause a denial of service via crafted zip archives containing highly compressed entries (zip bombs) that exhaust server memory.. Mattermost Advisory ID: MMSA-2026-00598