daw10

30 kredili kayıt · son 12 ayda 22 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
26İzleyin	CVE-2026-5132İstismar yok	Unbounded zlib decompression in Calls SDP WebSocket messagesmattermost · mattermost server · CWE-409 Hizmet dışı bırakma	Orta6,5	—	%0,4	14 Eyl 2026
26İzleyin	CVE-2026-4915İstismar yok	Server panic via outgoing webhook responsesmattermost · mattermost server · CWE-754 Hizmet dışı bırakma	Orta6,5	—	%0,2	25 May 2026
21İzleyin	CVE-2026-4635İstismar yok	Persistent notification timing attack causing server denial of servicemattermost · mattermost server · CWE-362 Yarış durumu Hizmet dışı bırakma	Orta5,3	—	%0,1	22 May 2026
39İzleyin	CVE-2026-4858İstismar yok	Path traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.mattermost · mattermost server · CWE-22 Yol geçişi	Kritik9,9	—	%0,3	21 May 2026
26İzleyin	CVE-2026-5163İstismar yok	Missing authorization check in AI message rewrite endpoint allows access to private thread contentmattermost · mattermost server · CWE-862 Erişim denetimi (IDOR)	Orta6,5	—	%0,2	18 May 2026
26İzleyin	CVE-2026-3117İstismar yok	Instance and webhook GitLab plugin commands were able to be run by non-admin usersmattermost · mattermost server · CWE-862 Erişim denetimi (IDOR) Hizmet dışı bırakma	Orta6,5	—	%0,2	18 May 2026
17İzleyin	CVE-2026-4273İstismar yok	Insufficient token rotation validation in remote cluster invite confirmationmattermost · mattermost server · CWE-863 Erişim denetimi (IDOR)	Orta4,3	—	%0,1	18 May 2026
17İzleyin	CVE-2026-28759İstismar yok	Insufficient authorization in shared channel membership sync allows remote cluster to remove users from arbitrary channelsmattermost · mattermost server · CWE-863 Erişim denetimi (IDOR)	Orta4,3	—	%0,1	18 May 2026
10İzleyin	CVE-2026-27769İstismar yok	Connected Workspaces: Malicious remote server can manipulate arbitrary user's statusmattermost · mattermost server · CWE-862 Erişim denetimi (IDOR)	Düşük2,7	—	%0,1	15 Nis 2026
21İzleyin	CVE-2026-4274İstismar yok	Insufficient authorization in shared channel membership sync grants team-level access instead of channel-level accessmattermost · mattermost server · CWE-863 Erişim denetimi (IDOR)	Orta5,4	—	%0,1	26 Mar 2026
14İzleyin	CVE-2026-22545İstismar yok	Password Change Bypass via Auth Switch Endpointmattermost · mattermost server · CWE-863 Erişim denetimi (IDOR)	Düşük3,5	—	%0,1	16 Mar 2026
26İzleyin	CVE-2026-2462İstismar yok	Admin RCE via Malicious Plugin Upload on CI Test Instancesmattermost · mattermost server · CWE-863 RCE Erişim denetimi (IDOR)	Orta6,6	—	%0,3	16 Mar 2026
17İzleyin	CVE-2026-2457İstismar yok	WebSocket Message Spoofing via Permalink Embed Manipulationmattermost · mattermost server · CWE-346	Orta4,3	—	%0,1	16 Mar 2026
22İzleyin	CVE-2025-13821İstismar yok	User profile update exposes password hash and MFA secretsmattermost · mattermost server · CWE-200 Bilgi sızıntısı	Orta5,7	—	%0,2	16 Şub 2026
17İzleyin	CVE-2026-0999İstismar yok	Authentication bypass via userID login when email and username login are disabledmattermost · mattermost server · CWE-303 Kimlik doğrulama atlatma	Orta4,3	—	%0,2	16 Şub 2026
17İzleyin	CVE-2026-0998İstismar yok	Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controlsmattermost · mattermost server · CWE-862 Erişim denetimi (IDOR)	Orta4,3	—	%0,1	16 Şub 2026
17İzleyin	CVE-2026-0997İstismar yok	Mattermost Zoom Plugin channel preference API lacks authorization checksmattermost · mattermost server · CWE-863 Erişim denetimi (IDOR)	Orta4,3	—	%0,1	16 Şub 2026
21İzleyin	CVE-2025-13523İstismar yok	Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flowmattermost · confluence · CWE-79 RCE XSS	Orta5,4	—	%0,2	6 Şub 2026
26İzleyin	CVE-2025-14435İstismar yok	Application-Level DoS via infinite re-render loop in user profile handlingmattermost · mattermost server · CWE-770 Hizmet dışı bırakma	Orta6,5	—	%0,3	16 Oca 2026
14İzleyin	CVE-2025-13324İstismar yok	Lack of Invalidation of Legacy Remote Cluster Invite Tokens After Confirmationmattermost · mattermost server · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Düşük3,7	—	%0,1	17 Ara 2025
39İzleyin	CVE-2025-12421İstismar yok	Account Takeover via Code Exchange Endpointmattermost · mattermost server · CWE-303	Kritik9,9	—	%0,4	27 Kas 2025
39İzleyin	CVE-2025-12419İstismar yok	Account takeover on OAuth/OpenID-enabled serversmattermost · mattermost server · CWE-303	Kritik9,9	—	%0,3	27 Kas 2025
21İzleyin	CVE-2025-41410İstismar yok	Slack import bypasses email verification for team access controlsmattermost · mattermost server · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,3	16 Eki 2025
26İzleyin	CVE-2025-9081İstismar yok	IDOR in board file download allows any user to download any file by UUIDmattermost · mattermost server · CWE-639 Erişim denetimi (IDOR)	Orta6,5	—	%0,2	19 Eyl 2025
28İzleyin	CVE-2025-9079İstismar yok	Admin RCE via prepackaged plugins by way of misconfigured imports directorymattermost · mattermost server · CWE-22 RCE Yol geçişi	Yüksek7,2	—	%0,6	19 Eyl 2025

CVE-2026-5132
26İzleyin
Unbounded zlib decompression in Calls SDP WebSocket messages
OrtaCVSS 6,5İstismar yokEPSS %0
- Hizmet dışı bırakma
mattermost · mattermost server14 Eyl 2026
CVE-2026-4915
26İzleyin
Server panic via outgoing webhook responses
OrtaCVSS 6,5İstismar yokEPSS %0
- Hizmet dışı bırakma
mattermost · mattermost server25 May 2026
CVE-2026-4635
21İzleyin
Persistent notification timing attack causing server denial of service
OrtaCVSS 5,3İstismar yokEPSS %0
- Yarış durumu
- Hizmet dışı bırakma
mattermost · mattermost server22 May 2026
CVE-2026-4858
39İzleyin
Path traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.
KritikCVSS 9,9İstismar yokEPSS %0
- Yol geçişi
mattermost · mattermost server21 May 2026
CVE-2026-5163
26İzleyin
Missing authorization check in AI message rewrite endpoint allows access to private thread content
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server18 May 2026
CVE-2026-3117
26İzleyin
Instance and webhook GitLab plugin commands were able to be run by non-admin users
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- Hizmet dışı bırakma
mattermost · mattermost server18 May 2026
CVE-2026-4273
17İzleyin
Insufficient token rotation validation in remote cluster invite confirmation
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server18 May 2026
CVE-2026-28759
17İzleyin
Insufficient authorization in shared channel membership sync allows remote cluster to remove users from arbitrary channels
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server18 May 2026
CVE-2026-27769
10İzleyin
Connected Workspaces: Malicious remote server can manipulate arbitrary user's status
DüşükCVSS 2,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server15 Nis 2026
CVE-2026-4274
21İzleyin
Insufficient authorization in shared channel membership sync grants team-level access instead of channel-level access
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server26 Mar 2026
CVE-2026-22545
14İzleyin
Password Change Bypass via Auth Switch Endpoint
DüşükCVSS 3,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server16 Mar 2026
CVE-2026-2462
26İzleyin
Admin RCE via Malicious Plugin Upload on CI Test Instances
OrtaCVSS 6,6İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
mattermost · mattermost server16 Mar 2026
CVE-2026-2457
17İzleyin
WebSocket Message Spoofing via Permalink Embed Manipulation
OrtaCVSS 4,3İstismar yokEPSS %0
mattermost · mattermost server16 Mar 2026
CVE-2025-13821
22İzleyin
User profile update exposes password hash and MFA secrets
OrtaCVSS 5,7İstismar yokEPSS %0
- Bilgi sızıntısı
mattermost · mattermost server16 Şub 2026
CVE-2026-0999
17İzleyin
Authentication bypass via userID login when email and username login are disabled
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulama atlatma
mattermost · mattermost server16 Şub 2026
CVE-2026-0998
17İzleyin
Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server16 Şub 2026
CVE-2026-0997
17İzleyin
Mattermost Zoom Plugin channel preference API lacks authorization checks
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server16 Şub 2026
CVE-2025-13523
21İzleyin
Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
mattermost · confluence6 Şub 2026
CVE-2025-14435
26İzleyin
Application-Level DoS via infinite re-render loop in user profile handling
OrtaCVSS 6,5İstismar yokEPSS %0
- Hizmet dışı bırakma
mattermost · mattermost server16 Oca 2026
CVE-2025-13324
14İzleyin
Lack of Invalidation of Legacy Remote Cluster Invite Tokens After Confirmation
DüşükCVSS 3,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
mattermost · mattermost server17 Ara 2025
CVE-2025-12421
39İzleyin
Account Takeover via Code Exchange Endpoint
KritikCVSS 9,9İstismar yokEPSS %0
mattermost · mattermost server27 Kas 2025
CVE-2025-12419
39İzleyin
Account takeover on OAuth/OpenID-enabled servers
KritikCVSS 9,9İstismar yokEPSS %0
mattermost · mattermost server27 Kas 2025
CVE-2025-41410
21İzleyin
Slack import bypasses email verification for team access controls
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server16 Eki 2025
CVE-2025-9081
26İzleyin
IDOR in board file download allows any user to download any file by UUID
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server19 Eyl 2025
CVE-2025-9079
28İzleyin
Admin RCE via prepackaged plugins by way of misconfigured imports directory
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- Yol geçişi
mattermost · mattermost server19 Eyl 2025