Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 13:08:27 +0000 CVE-2026-3117 — Instance and webhook GitLab plugin commands were able to be run by non-admin users https://cve.radiocsirt.org/vuln/cve-2026-3117 <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost Plugins versions &lt;=11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the {{gitlab instance {option}}} or the {{/gitlab webhook {option}}} commands. Mattermost Advisory ID: MMSA-2026-00600</p> <p><strong>Affected:</strong> Mattermost</p> <p>Mattermost Plugins versions &lt;=11.5 11.1.5 10.13.11 11.3.4.0 fail to properly check for permissions when processing commands in the Gitlab plugin which allows normal users to uninstall instances or setup webhook connections via the {{gitlab instance {option}}} or the {{/gitlab webhook {option}}} commands. Mattermost Advisory ID: MMSA-2026-00600</p> https://cve.radiocsirt.org/vuln/cve-2026-3117