https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:05:14.514006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-13426 CVE-2026-13426 — Client4 fails to validate path parameters 2026-10-06T14:05:14.530326+00:00

Affected: Mattermost github.com/mattermost/mattermost/server/public

The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to validate path parameters when constructing API route paths which allows an attacker to redirect API calls to unintended endpoints via crafted IDs containing path traversal components. Mattermost Advisory ID: MMSA-2025-00532