hackit_BhaRat
10 credited records · 2 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
15Monitor | CVE-2026-8074No exploit | Improper Permission Check Allows User Manager to Deactivate Bot Accountsmattermost · mattermost server · CWE-863 | Low3.8 | — | 0.3% | Jun 22, 2026 |
15Monitor | CVE-2026-26230No exploit | Team Admin Privilege Escalation to Demote Members to Guestmattermost · mattermost server · CWE-863 | Low3.8 | — | 0.1% | Mar 16, 2026 |
15Monitor | CVE-2025-53971No exploit | Channel and Team Membership APIs inadvertently allow loss of Member privileges.mattermost · mattermost server · CWE-863 | Low3.8 | — | 0.2% | Aug 21, 2025 |
17Monitor | CVE-2025-3228No exploit | Unauthorized Guest user access to Playbookmattermost · mattermost server · CWE-863 | Medium4.3 | — | 0.2% | Jun 20, 2025 |
17Monitor | CVE-2025-4128No exploit | Mattermost Guest User Information Disclosure Vulnerabilitymattermost · mattermost server · CWE-863 | Medium4.3 | — | 0.2% | Jun 11, 2025 |
17Monitor | CVE-2025-3611No exploit | Improper Access Control in Mattermost allows System Managers to view team details despite role restrictionsmattermost · mattermost server · CWE-863 | Medium4.3 | — | 0.2% | May 30, 2025 |
17Monitor | CVE-2025-2564No exploit | Unauthorized View Access to Archived Channel Member Infomattermost · mattermost server · CWE-863 | Medium4.3 | — | 0.2% | Apr 16, 2025 |
17Monitor | CVE-2025-27571No exploit | Channel metadata visible in archived channels despite configuration settingmattermost · mattermost server · CWE-863 | Medium4.3 | — | 0.2% | Apr 16, 2025 |
35Monitor | CVE-2025-25274No exploit | Unauthorized Command Execution in Archived Channelsmattermost · mattermost server · CWE-863 | High8.8 | — | 0.3% | Mar 21, 2025 |
21Monitor | CVE-2023-1774No exploit | Unauthorized email invite to a private channelmattermost · mattermost server · CWE-862 | Medium5.4 | — | 0.3% | Mar 31, 2023 |
- CVE-2026-807415Monitor
Improper Permission Check Allows User Manager to Deactivate Bot Accounts
LowCVSS 3.8No exploitEPSS 0%mattermost · mattermost serverJun 22, 2026
- CVE-2026-2623015Monitor
Team Admin Privilege Escalation to Demote Members to Guest
LowCVSS 3.8No exploitEPSS 0%mattermost · mattermost serverMar 16, 2026
- CVE-2025-5397115Monitor
Channel and Team Membership APIs inadvertently allow loss of Member privileges.
LowCVSS 3.8No exploitEPSS 0%mattermost · mattermost serverAug 21, 2025
- CVE-2025-322817Monitor
Unauthorized Guest user access to Playbook
MediumCVSS 4.3No exploitEPSS 0%mattermost · mattermost serverJun 20, 2025
- CVE-2025-412817Monitor
Mattermost Guest User Information Disclosure Vulnerability
MediumCVSS 4.3No exploitEPSS 0%mattermost · mattermost serverJun 11, 2025
- CVE-2025-361117Monitor
Improper Access Control in Mattermost allows System Managers to view team details despite role restrictions
MediumCVSS 4.3No exploitEPSS 0%mattermost · mattermost serverMay 30, 2025
- CVE-2025-256417Monitor
Unauthorized View Access to Archived Channel Member Info
MediumCVSS 4.3No exploitEPSS 0%mattermost · mattermost serverApr 16, 2025
- CVE-2025-2757117Monitor
Channel metadata visible in archived channels despite configuration setting
MediumCVSS 4.3No exploitEPSS 0%mattermost · mattermost serverApr 16, 2025
- CVE-2025-2527435Monitor
Unauthorized Command Execution in Archived Channels
HighCVSS 8.8No exploitEPSS 0%mattermost · mattermost serverMar 21, 2025
- CVE-2023-177421Monitor
Unauthorized email invite to a private channel
MediumCVSS 5.4No exploitEPSS 0%mattermost · mattermost serverMar 31, 2023