<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 02:22:11 +0000</lastBuildDate>
    <item>
      <title>bdu:2026-09267</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2026-09267</link>
      <description>bdu:2026-09267</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2026-09267</guid>
    </item>
    <item>
      <title>EUVD-2026-319938</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-319938</link>
      <description>EUVD-2026-319938</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-319938</guid>
    </item>
    <item>
      <title>fkie_cve-2026-4858</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2026-4858</link>
      <description>&lt;p&gt;Mattermost versions 11.6.x &amp;lt;= 11.6.0, 11.5.x &amp;lt;= 11.5.3, 11.4.x &amp;lt;= 11.4.4, 10.11.x &amp;lt;= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user  to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL.. Mattermost Advisory ID: MMSA-2026-00640&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Mattermost versions 11.6.x &amp;lt;= 11.6.0, 11.5.x &amp;lt;= 11.5.3, 11.4.x &amp;lt;= 11.4.4, 10.11.x &amp;lt;= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user  to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL.. Mattermost Advisory ID: MMSA-2026-00640&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2026-4858</guid>
    </item>
    <item>
      <title>GHSA-c4r7-j7pp-r8mp — Mattermost has a Path Traversal issue</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-c4r7-j7pp-r8mp</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Go: github.com/mattermost/mattermost-server&lt;/p&gt;
&lt;p&gt;Mattermost versions 11.6.x &amp;lt;= 11.6.0, 11.5.x &amp;lt;= 11.5.3, 11.4.x &amp;lt;= 11.4.4, 10.11.x &amp;lt;= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user  to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL. Mattermost Advisory ID: MMSA-2026-00640.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Go: github.com/mattermost/mattermost-server&lt;/p&gt;
&lt;p&gt;Mattermost versions 11.6.x &amp;lt;= 11.6.0, 11.5.x &amp;lt;= 11.5.3, 11.4.x &amp;lt;= 11.4.4, 10.11.x &amp;lt;= 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user  to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action URL. Mattermost Advisory ID: MMSA-2026-00640.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-c4r7-j7pp-r8mp</guid>
    </item>
    <item>
      <title>WID-SEC-W-2026-1173 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1173</link>
      <description>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1173</guid>
    </item>
  </channel>
</rss>
