https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T14:25:02.561381+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1098 certfr-2026-avi-1098 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un… 2026-09-30T14:25:02.588414+00:00 certfr-2026-avi-1098 https://db.gcve.eu/vuln/fkie_cve-2026-82920 fkie_cve-2026-82920 2026-09-30T14:25:02.588477+00:00

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channel or team administrator to detach a system-assigned ABAC parent policy via a crafted PUT /api/v4/access_control_policies request with an empty imports list.. Mattermost Advisory ID: MMSA-2026-00724

 https://db.gcve.eu/vuln/ghsa-v87m-p66q-xcjg GHSA-v87m-p66q-xcjg 2026-09-30T14:25:02.588529+00:00

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channel or team administrator to detach a system-assigned ABAC parent policy via a crafted PUT /api/v4/access_control_policies request with an empty imports list.. Mattermost Advisory ID: MMSA-2026-00724