https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:06:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06567 bdu:2026-06567 https://cve.radiocsirt.org/vuln/bdu:2026-06567 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0173 certfr-2026-avi-0173 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0173 https://cve.radiocsirt.org/vuln/euvd-2026-276308 EUVD-2026-276308 https://cve.radiocsirt.org/vuln/euvd-2026-276308 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2462 <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an unauthenticated attacker to achieve remote code execution and exfiltrate sensitive configuration data including AWS and SMTP credentials via uploading a malicious plugin after changing the import directory. Mattermost Advisory ID: MMSA-2025-00528</p> <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an unauthenticated attacker to achieve remote code execution and exfiltrate sensitive configuration data including AWS and SMTP credentials via uploading a malicious plugin after changing the import directory. Mattermost Advisory ID: MMSA-2025-00528</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2462 https://cve.radiocsirt.org/vuln/ghsa-fprx-ppqr-8wgf <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an unauthenticated attacker to achieve remote code execution and exfiltrate sensitive configuration data including AWS and SMTP credentials via uploading a malicious plugin after changing the import directory. Mattermost Advisory ID: MMSA-2025-00528</p> <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows an unauthenticated attacker to achieve remote code execution and exfiltrate sensitive configuration data including AWS and SMTP credentials via uploading a malicious plugin after changing the import directory. Mattermost Advisory ID: MMSA-2025-00528</p> https://cve.radiocsirt.org/vuln/ghsa-fprx-ppqr-8wgf https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0422 <p>Ein authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um falsche Informationen anzuzeigen, Informationen offenzulegen, Sicherheitskontrollen zu umgehen und eine Denial-of-Service-Situation zu erzeugen.</p> <p>Ein authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um falsche Informationen anzuzeigen, Informationen offenzulegen, Sicherheitskontrollen zu umgehen und eine Denial-of-Service-Situation zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0422