eAhmed

8 credited records · 4 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2026-28735No exploit	GitHub OAuth Scope Validationmattermost · mattermost server · CWE-863 Broken access control (IDOR)	Medium5.4	—	0.2%	May 22, 2026
28Monitor	CVE-2026-3473No exploit	Improper file ownership validation in the Boards API allows unauthorised file accessmattermost · mattermost server · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	May 22, 2026
17Monitor	CVE-2026-6342No exploit	Group prefix matching bypass for subscriptionsmattermost · mattermost server · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.3%	May 18, 2026
17Monitor	CVE-2026-6341No exploit	Incomplete group locking implementationmattermost · mattermost server · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.3%	May 18, 2026
21Monitor	CVE-2025-3230No exploit	Bypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost Servermattermost · mattermost server · CWE-303	Medium5.4	—	0.2%	May 30, 2025
16Monitor	CVE-2025-2571No exploit	Google OAuth Authentication Bypass for Converted Bot Accountsmattermost · mattermost server · CWE-303 Auth bypass	Medium4.2	—	0.2%	May 30, 2025
21Monitor	CVE-2025-2475No exploit	Unauthorized Bot Login Using Credentialsmattermost · mattermost server · CWE-303	Medium5.4	—	0.2%	Apr 14, 2025
35Monitor	CVE-2025-1412No exploit	Session Persistence After User-to-Bot Conversionmattermost · mattermost server · CWE-384	High8.8	—	0.3%	Feb 24, 2025

CVE-2026-28735
21Monitor
GitHub OAuth Scope Validation
MediumCVSS 5.4No exploitEPSS 0%
- Broken access control (IDOR)
mattermost · mattermost serverMay 22, 2026
CVE-2026-3473
28Monitor
Improper file ownership validation in the Boards API allows unauthorised file access
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mattermost · mattermost serverMay 22, 2026
CVE-2026-6342
17Monitor
Group prefix matching bypass for subscriptions
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
mattermost · mattermost serverMay 18, 2026
CVE-2026-6341
17Monitor
Incomplete group locking implementation
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
mattermost · mattermost serverMay 18, 2026
CVE-2025-3230
21Monitor
Bypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost Server
MediumCVSS 5.4No exploitEPSS 0%
mattermost · mattermost serverMay 30, 2025
CVE-2025-2571
16Monitor
Google OAuth Authentication Bypass for Converted Bot Accounts
MediumCVSS 4.2No exploitEPSS 0%
- Auth bypass
mattermost · mattermost serverMay 30, 2025
CVE-2025-2475
21Monitor
Unauthorized Bot Login Using Credentials
MediumCVSS 5.4No exploitEPSS 0%
mattermost · mattermost serverApr 14, 2025
CVE-2025-1412
35Monitor
Session Persistence After User-to-Bot Conversion
HighCVSS 8.8No exploitEPSS 0%
mattermost · mattermost serverFeb 24, 2025