Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:45:42 +0000 bdu:2026-06561 https://cve.radiocsirt.org/vuln/bdu:2026-06561 bdu:2026-06561 https://cve.radiocsirt.org/vuln/bdu:2026-06561 EUVD-2026-276246 https://cve.radiocsirt.org/vuln/euvd-2026-276246 EUVD-2026-276246 https://cve.radiocsirt.org/vuln/euvd-2026-276246 fkie_cve-2026-24692 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24692 <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554</p> <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-24692 GHSA-cwfj-642j-gfh4 — Mattermost fails to properly enforce read permissions in search API endpoints https://cve.radiocsirt.org/vuln/ghsa-cwfj-642j-gfh4 <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server</p> <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server</p> <p>Mattermost versions 11.3.x &lt;= 11.3.0, 11.2.x &lt;= 11.2.2, 10.11.x &lt;= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554</p> https://cve.radiocsirt.org/vuln/ghsa-cwfj-642j-gfh4 WID-SEC-W-2026-0422 — Mattermost: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0422 <p>Ein authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um falsche Informationen anzuzeigen, Informationen offenzulegen, Sicherheitskontrollen zu umgehen und eine Denial-of-Service-Situation zu erzeugen.</p> <p>Ein authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um falsche Informationen anzuzeigen, Informationen offenzulegen, Sicherheitskontrollen zu umgehen und eine Denial-of-Service-Situation zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0422