https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 23:01:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280561 EUVD-2026-280561 https://cve.radiocsirt.org/vuln/euvd-2026-280561 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3524 <p>Mattermost Plugin Legal Hold versions &lt;=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin&#39;s endpoints. Mattermost Advisory ID: MMSA-2026-00621</p> <p>Mattermost Plugin Legal Hold versions &lt;=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin&#39;s endpoints. Mattermost Advisory ID: MMSA-2026-00621</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3524 https://cve.radiocsirt.org/vuln/ghsa-h7g6-pq3g-f7cw <p>Mattermost Plugin Legal Hold versions &lt;=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin&#39;s endpoints. Mattermost Advisory ID: MMSA-2026-00621</p> <p>Mattermost Plugin Legal Hold versions &lt;=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to access, create, download, and delete legal hold data via crafted API requests to the plugin&#39;s endpoints. Mattermost Advisory ID: MMSA-2026-00621</p> https://cve.radiocsirt.org/vuln/ghsa-h7g6-pq3g-f7cw https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0625 <p>Ein Angreifer kann eine Schwachstelle im Mattermost-Plugin &#34;Legal Hold&#34; ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann eine Schwachstelle im Mattermost-Plugin &#34;Legal Hold&#34; ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0625