https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:56:49.869506+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24661 CVE-2026-24661 — Unbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook Endpoint 2026-10-08T21:56:49.870517+00:00

Affected: Mattermost

Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00611