Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:17:25 +0000 CVE-2026-0998 — Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls https://cve.radiocsirt.org/vuln/cve-2026-0998 <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 and Mattermost Plugin Zoom versions &lt;=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via direct API calls with manipulated user IDs and post data.. Mattermost Advisory ID: MMSA-2025-00534</p> <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 11.1.x &lt;= 11.1.2, 10.11.x &lt;= 10.11.9, 11.2.x &lt;= 11.2.1 and Mattermost Plugin Zoom versions &lt;=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via direct API calls with manipulated user IDs and post data.. Mattermost Advisory ID: MMSA-2025-00534</p> https://cve.radiocsirt.org/vuln/cve-2026-0998