https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:11:09.428972+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-3473 CVE-2026-3473 — Improper file ownership validation in the Boards API allows unauthorised file access 2026-10-06T18:11:09.450539+00:00

Affected: Mattermost

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.. Mattermost Advisory ID: MMSA-2026-00620