Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:30:32 +0000 CVE-2025-14573 — Team Admin Bypass of Invite Permissions via allow_open_invite Field https://cve.radiocsirt.org/vuln/cve-2025-14573 <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 10.11.x &lt;= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561</p> <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost versions 10.11.x &lt;= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561</p> https://cve.radiocsirt.org/vuln/cve-2025-14573