<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 14:27:42 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-10556</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-10556</link>
      <description>&lt;p&gt;Mattermost versions 11.9.x &amp;lt;= 11.9.0, 11.8.x &amp;lt;= 11.8.4, 11.7.x &amp;lt;= 11.7.7, 10.11.x &amp;lt;= 10.11.22 fail to validate null entries in Microsoft Graph webhook notification payloads, which allows an unauthenticated attacker to crash the Microsoft Calendar plugin process and deny calendar integration service to all users on the instance via a crafted {{POST}} request to the public webhook endpoint.. Mattermost Advisory ID: MMSA-2026-00693&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Mattermost versions 11.9.x &amp;lt;= 11.9.0, 11.8.x &amp;lt;= 11.8.4, 11.7.x &amp;lt;= 11.7.7, 10.11.x &amp;lt;= 10.11.22 fail to validate null entries in Microsoft Graph webhook notification payloads, which allows an unauthenticated attacker to crash the Microsoft Calendar plugin process and deny calendar integration service to all users on the instance via a crafted {{POST}} request to the public webhook endpoint.. Mattermost Advisory ID: MMSA-2026-00693&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-10556</guid>
    </item>
    <item>
      <title>GHSA-56v5-m3m2-x7qh</title>
      <link>https://db.gcve.eu/vuln/ghsa-56v5-m3m2-x7qh</link>
      <description>&lt;p&gt;Mattermost versions 11.9.x &amp;lt;= 11.9.0, 11.8.x &amp;lt;= 11.8.4, 11.7.x &amp;lt;= 11.7.7, 10.11.x &amp;lt;= 10.11.22 fail to validate null entries in Microsoft Graph webhook notification payloads, which allows an unauthenticated attacker to crash the Microsoft Calendar plugin process and deny calendar integration service to all users on the instance via a crafted {{POST}} request to the public webhook endpoint.. Mattermost Advisory ID: MMSA-2026-00693&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Mattermost versions 11.9.x &amp;lt;= 11.9.0, 11.8.x &amp;lt;= 11.8.4, 11.7.x &amp;lt;= 11.7.7, 10.11.x &amp;lt;= 10.11.22 fail to validate null entries in Microsoft Graph webhook notification payloads, which allows an unauthenticated attacker to crash the Microsoft Calendar plugin process and deny calendar integration service to all users on the instance via a crafted {{POST}} request to the public webhook endpoint.. Mattermost Advisory ID: MMSA-2026-00693&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-56v5-m3m2-x7qh</guid>
    </item>
  </channel>
</rss>
