https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 14:25:07 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1098 certfr-2026-avi-1098 https://db.gcve.eu/vuln/certfr-2026-avi-1098 https://db.gcve.eu/vuln/fkie_cve-2026-82920 <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channel or team administrator to detach a system-assigned ABAC parent policy via a crafted PUT /api/v4/access_control_policies request with an empty imports list.. Mattermost Advisory ID: MMSA-2026-00724</p> <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channel or team administrator to detach a system-assigned ABAC parent policy via a crafted PUT /api/v4/access_control_policies request with an empty imports list.. Mattermost Advisory ID: MMSA-2026-00724</p> https://db.gcve.eu/vuln/fkie_cve-2026-82920 https://db.gcve.eu/vuln/ghsa-v87m-p66q-xcjg <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channel or team administrator to detach a system-assigned ABAC parent policy via a crafted PUT /api/v4/access_control_policies request with an empty imports list.. Mattermost Advisory ID: MMSA-2026-00724</p> <p>Mattermost versions 11.9.x &lt;= 11.9.0, 11.8.x &lt;= 11.8.4, 11.7.x &lt;= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channel or team administrator to detach a system-assigned ABAC parent policy via a crafted PUT /api/v4/access_control_policies request with an empty imports list.. Mattermost Advisory ID: MMSA-2026-00724</p> https://db.gcve.eu/vuln/ghsa-v87m-p66q-xcjg