https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:37:00 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-av59470 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: prometheus-node-exporter</p> <p>Package prometheus-node-exporter version 1.12.1-r0 fixes 1 vulnerabilities: CVE-2026-28735</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: prometheus-node-exporter</p> <p>Package prometheus-node-exporter version 1.12.1-r0 fixes 1 vulnerabilities: CVE-2026-28735</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-av59470 https://cve.radiocsirt.org/vuln/euvd-2026-320131 EUVD-2026-320131 https://cve.radiocsirt.org/vuln/euvd-2026-320131 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28735 <p>Mattermost versions 11.6.x &lt;= 11.6.0, 11.5.x &lt;= 11.5.3, 11.4.x &lt;= 11.4.4, 10.11.x &lt;= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL.. Mattermost Advisory ID: MMSA-2026-00628</p> <p>Mattermost versions 11.6.x &lt;= 11.6.0, 11.5.x &lt;= 11.5.3, 11.4.x &lt;= 11.4.4, 10.11.x &lt;= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL.. Mattermost Advisory ID: MMSA-2026-00628</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28735 https://cve.radiocsirt.org/vuln/ghsa-r5vf-grcx-5vqp <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost-plugin-github</p> <p>Mattermost versions 11.6.x &lt;= 11.6.0, 11.5.x &lt;= 11.5.3, 11.4.x &lt;= 11.4.4, 10.11.x &lt;= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL. Mattermost Advisory ID: MMSA-2026-00628</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost-plugin-github</p> <p>Mattermost versions 11.6.x &lt;= 11.6.0, 11.5.x &lt;= 11.5.3, 11.4.x &lt;= 11.4.4, 10.11.x &lt;= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL. Mattermost Advisory ID: MMSA-2026-00628</p> https://cve.radiocsirt.org/vuln/ghsa-r5vf-grcx-5vqp https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1173 <p>Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1173