https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:20:49 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-18551 <p>Mattermost versions 11.10.x &lt;= 11.10.0, 11.7.x &lt;= 11.7.9, 11.9.x &lt;= 11.9.1, 11.8.x &lt;= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API endpoint.. Mattermost Advisory ID: MMSA-2026-00752</p> <p>Mattermost versions 11.10.x &lt;= 11.10.0, 11.7.x &lt;= 11.7.9, 11.9.x &lt;= 11.9.1, 11.8.x &lt;= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API endpoint.. Mattermost Advisory ID: MMSA-2026-00752</p> https://db.gcve.eu/vuln/fkie_cve-2026-18551 https://db.gcve.eu/vuln/ghsa-rh7p-pp3q-6cf8 <p>Mattermost versions 11.10.x &lt;= 11.10.0, 11.7.x &lt;= 11.7.9, 11.9.x &lt;= 11.9.1, 11.8.x &lt;= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API endpoint.. Mattermost Advisory ID: MMSA-2026-00752</p> <p>Mattermost versions 11.10.x &lt;= 11.10.0, 11.7.x &lt;= 11.7.9, 11.9.x &lt;= 11.9.1, 11.8.x &lt;= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API endpoint.. Mattermost Advisory ID: MMSA-2026-00752</p> https://db.gcve.eu/vuln/ghsa-rh7p-pp3q-6cf8