Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 11:57:26 +0000 EUVD-2026-319251 https://cve.radiocsirt.org/vuln/euvd-2026-319251 EUVD-2026-319251 https://cve.radiocsirt.org/vuln/euvd-2026-319251 fkie_cve-2026-3637 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3637 <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13, 11.4.x &lt;= 11.4.3 fail to check the create_post channel permission during post edit operations which allows an authenticated attacker with revoked posting privileges to modify their existing posts via direct API requests to the post update and patch endpoints.. Mattermost Advisory ID: MMSA-2026-00627</p> <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13, 11.4.x &lt;= 11.4.3 fail to check the create_post channel permission during post edit operations which allows an authenticated attacker with revoked posting privileges to modify their existing posts via direct API requests to the post update and patch endpoints.. Mattermost Advisory ID: MMSA-2026-00627</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3637 GHSA-v549-xx3c-6pc8 — Mattermost doesn't check the create_post channel permission during post edit operations https://cve.radiocsirt.org/vuln/ghsa-v549-xx3c-6pc8 <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server</p> <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13, 11.4.x &lt;= 11.4.3 fail to check the create_post channel permission during post edit operations which allows an authenticated attacker with revoked posting privileges to modify their existing posts via direct API requests to the post update and patch endpoints.. Mattermost Advisory ID: MMSA-2026-00627</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server</p> <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13, 11.4.x &lt;= 11.4.3 fail to check the create_post channel permission during post edit operations which allows an authenticated attacker with revoked posting privileges to modify their existing posts via direct API requests to the post update and patch endpoints.. Mattermost Advisory ID: MMSA-2026-00627</p> https://cve.radiocsirt.org/vuln/ghsa-v549-xx3c-6pc8