https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T19:00:23.894259+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-10556 CVE-2026-10556 — Unauthenticated webhook request with null notification entry could crash the Microsoft Calendar plugin. 2026-09-30T19:00:23.896170+00:00

Affected: Mattermost

Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate null entries in Microsoft Graph webhook notification payloads, which allows an unauthenticated attacker to crash the Microsoft Calendar plugin process and deny calendar integration service to all users on the instance via a crafted {{POST}} request to the public webhook endpoint.. Mattermost Advisory ID: MMSA-2026-00693