Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 00:24:14 +0000 EUVD-2026-319192 https://cve.radiocsirt.org/vuln/euvd-2026-319192 EUVD-2026-319192 https://cve.radiocsirt.org/vuln/euvd-2026-319192 fkie_cve-2026-4286 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4286 <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permission to change a playbook&#39;s team, bypassing manage members restriction via PUT api. Mattermost Advisory ID: MMSA-2025-00552</p> <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permission to change a playbook&#39;s team, bypassing manage members restriction via PUT api. Mattermost Advisory ID: MMSA-2025-00552</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4286 GHSA-gvg4-jhmr-6j23 — Mattermost doesn't check if {{team_id}} was being changed when updating playbooks https://cve.radiocsirt.org/vuln/ghsa-gvg4-jhmr-6j23 <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-plugin-playbooks</p> <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permission to change a playbook&#39;s team, bypassing manage members restriction via PUT api. Mattermost Advisory ID: MMSA-2025-00552</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-plugin-playbooks</p> <p>Mattermost versions 11.5.x &lt;= 11.5.1, 10.11.x &lt;= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permission to change a playbook&#39;s team, bypassing manage members restriction via PUT api. Mattermost Advisory ID: MMSA-2025-00552</p> https://cve.radiocsirt.org/vuln/ghsa-gvg4-jhmr-6j23