Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:03:24 +0000 CVE-2026-0997 — Mattermost Zoom Plugin channel preference API lacks authorization checks https://cve.radiocsirt.org/vuln/cve-2026-0997 <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 and Mattermost Plugin Zoom versions &lt;=1.11.0 fail to validate the authenticated user when processing {{/plugins/zoom/api/v1/channel-preference}}, which allows any logged-in user to change Zoom meeting restrictions for arbitrary channels via crafted API requests.. Mattermost Advisory ID: MMSA-2025-00558</p> <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 and Mattermost Plugin Zoom versions &lt;=1.11.0 fail to validate the authenticated user when processing {{/plugins/zoom/api/v1/channel-preference}}, which allows any logged-in user to change Zoom meeting restrictions for arbitrary channels via crafted API requests.. Mattermost Advisory ID: MMSA-2025-00558</p> https://cve.radiocsirt.org/vuln/cve-2026-0997