Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:06:04 +0000 CVE-2025-3611 — Improper Access Control in Mattermost allows System Managers to view team details despite role restrictions https://cve.radiocsirt.org/vuln/cve-2025-3611 <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 10.7.x &lt;= 10.7.0, 10.5.x &lt;= 10.5.3, 9.11.x &lt;= 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have access to via direct API requests to team endpoints, even when explicitly configured with &#39;No access&#39; to Teams in the System Console.</p> <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 10.7.x &lt;= 10.7.0, 10.5.x &lt;= 10.5.3, 9.11.x &lt;= 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have access to via direct API requests to team endpoints, even when explicitly configured with &#39;No access&#39; to Teams in the System Console.</p> https://cve.radiocsirt.org/vuln/cve-2025-3611