<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 22:10:15 +0000</lastBuildDate>
    <item>
      <title>certfr-2025-avi-0355 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0355</link>
      <description>certfr-2025-avi-0355</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2025-avi-0355</guid>
    </item>
    <item>
      <title>cnvd-2025-12758</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2025-12758</link>
      <description>cnvd-2025-12758</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2025-12758</guid>
    </item>
    <item>
      <title>EUVD-2026-242107</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-242107</link>
      <description>EUVD-2026-242107</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-242107</guid>
    </item>
    <item>
      <title>fkie_cve-2025-3230</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2025-3230</link>
      <description>&lt;p&gt;Mattermost versions 10.7.x &amp;lt;= 10.7.0, 10.6.x &amp;lt;= 10.6.2, 10.5.x &amp;lt;= 10.5.3, 9.11.x &amp;lt;= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Mattermost versions 10.7.x &amp;lt;= 10.7.0, 10.6.x &amp;lt;= 10.6.2, 10.5.x &amp;lt;= 10.5.3, 9.11.x &amp;lt;= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2025-3230</guid>
    </item>
    <item>
      <title>GHSA-mc2f-jgj6-6cp3 — Mattermost fails to properly invalidate personal access tokens upon user deactivation</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-mc2f-jgj6-6cp3</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Go: github.com/mattermost/mattermost/server/v8&lt;/p&gt;
&lt;p&gt;Mattermost versions 10.7.x &amp;lt;= 10.7.0, 10.6.x &amp;lt;= 10.6.2, 10.5.x &amp;lt;= 10.5.3, 9.11.x &amp;lt;= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Go: github.com/mattermost/mattermost/server/v8&lt;/p&gt;
&lt;p&gt;Mattermost versions 10.7.x &amp;lt;= 10.7.0, 10.6.x &amp;lt;= 10.6.2, 10.5.x &amp;lt;= 10.5.3, 9.11.x &amp;lt;= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-mc2f-jgj6-6cp3</guid>
    </item>
    <item>
      <title>openSUSE-SU-2025:15225-1 — govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2025:15225-1</link>
      <description>&lt;p&gt;govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2025:15225-1</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-0905 — Mattermost: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0905</link>
      <description>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0905</guid>
    </item>
  </channel>
</rss>
