Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:42:31 +0000 CVE-2026-13426 — Client4 fails to validate path parameters https://cve.radiocsirt.org/vuln/cve-2026-13426 <p><strong>Affected:</strong> Mattermost github.com/mattermost/mattermost/server/public</p> <p>The Mattermost Go module github.com/mattermost/mattermost/server/public versions &lt; v0.1.22 fail to validate path parameters when constructing API route paths which allows an attacker to redirect API calls to unintended endpoints via crafted IDs containing path traversal components. Mattermost Advisory ID: MMSA-2025-00532</p> <p><strong>Affected:</strong> Mattermost github.com/mattermost/mattermost/server/public</p> <p>The Mattermost Go module github.com/mattermost/mattermost/server/public versions &lt; v0.1.22 fail to validate path parameters when constructing API route paths which allows an attacker to redirect API calls to unintended endpoints via crafted IDs containing path traversal components. Mattermost Advisory ID: MMSA-2025-00532</p> https://cve.radiocsirt.org/vuln/cve-2026-13426