winfunc

12 kredili kayıt · son 12 ayda 12 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
22İzleyin	CVE-2026-7521İstismar yok	SAML certificate deletion allows path traversal to delete arbitrary files outside the config directorymattermost · mattermost server · CWE-22 Yol geçişi	Orta5,5	—	%0,4	28 Tem 2026
17İzleyin	CVE-2026-9162İstismar yok	Global session revocation does not invalidate active WebSocket connectionsmattermost · mattermost server · CWE-613	Orta4,3	—	%0,3	22 Haz 2026
35İzleyin	CVE-2026-7387İstismar yok	Mattermost group syncable endpoints allow privilege escalation via scheme_adminmattermost · mattermost server · CWE-863 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,4	12 Haz 2026
26İzleyin	CVE-2026-7184İstismar yok	Mattermost Remote Cluster PATCH API Leaks Authentication Tokensmattermost · mattermost server · CWE-201	Orta6,5	—	%0,4	12 Haz 2026
17İzleyin	CVE-2026-3115İstismar yok	Guest users can view group member IDs without respecting view restrictionsmattermost · mattermost server · CWE-863 Erişim denetimi (IDOR)	Orta4,3	—	%0,3	26 Mar 2026
26İzleyin	CVE-2026-3114İstismar yok	Zip Bomb Denial of Service via Unrestricted Archive Decompressionmattermost · mattermost server · CWE-409 Hizmet dışı bırakma	Orta6,5	—	%0,4	26 Mar 2026
22İzleyin	CVE-2026-3113İstismar yok	mmctl export download command doesn’t restrict permissions to created file to file ownermattermost · mattermost server · CWE-732	Orta5,5	—	%0,1	26 Mar 2026
35İzleyin	CVE-2026-3108İstismar yok	Terminal Escape Injection in mmctl Report Posts Commandmattermost · mattermost server · CWE-150	Yüksek8,8	—	%0,3	26 Mar 2026
17İzleyin	CVE-2026-2455İstismar yok	SSRF bypass via IPv4-mapped IPv6 literalsmattermost · mattermost server · CWE-918 SSRF	Orta4,3	—	%0,2	16 Mar 2026
17İzleyin	CVE-2026-21386İstismar yok	Private channel enumeration via /mute slash commandmattermost · mattermost server · CWE-203	Orta4,3	—	%0,2	16 Mar 2026
17İzleyin	CVE-2026-25783İstismar yok	Denial of service via malformed User-Agent header in getBrowserVersionmattermost · mattermost server · CWE-1287 Hizmet dışı bırakma	Orta4,3	—	%0,4	16 Mar 2026
30İzleyin	CVE-2026-24458İstismar yok	DoS attack via login attempts with multi-megabyte passwordsmattermost · mattermost server · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,3	16 Mar 2026

CVE-2026-7521
22İzleyin
SAML certificate deletion allows path traversal to delete arbitrary files outside the config directory
OrtaCVSS 5,5İstismar yokEPSS %0
- Yol geçişi
mattermost · mattermost server28 Tem 2026
CVE-2026-9162
17İzleyin
Global session revocation does not invalidate active WebSocket connections
OrtaCVSS 4,3İstismar yokEPSS %0
mattermost · mattermost server22 Haz 2026
CVE-2026-7387
35İzleyin
Mattermost group syncable endpoints allow privilege escalation via scheme_admin
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server12 Haz 2026
CVE-2026-7184
26İzleyin
Mattermost Remote Cluster PATCH API Leaks Authentication Tokens
OrtaCVSS 6,5İstismar yokEPSS %0
mattermost · mattermost server12 Haz 2026
CVE-2026-3115
17İzleyin
Guest users can view group member IDs without respecting view restrictions
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mattermost · mattermost server26 Mar 2026
CVE-2026-3114
26İzleyin
Zip Bomb Denial of Service via Unrestricted Archive Decompression
OrtaCVSS 6,5İstismar yokEPSS %0
- Hizmet dışı bırakma
mattermost · mattermost server26 Mar 2026
CVE-2026-3113
22İzleyin
mmctl export download command doesn’t restrict permissions to created file to file owner
OrtaCVSS 5,5İstismar yokEPSS %0
mattermost · mattermost server26 Mar 2026
CVE-2026-3108
35İzleyin
Terminal Escape Injection in mmctl Report Posts Command
YüksekCVSS 8,8İstismar yokEPSS %0
mattermost · mattermost server26 Mar 2026
CVE-2026-2455
17İzleyin
SSRF bypass via IPv4-mapped IPv6 literals
OrtaCVSS 4,3İstismar yokEPSS %0
- SSRF
mattermost · mattermost server16 Mar 2026
CVE-2026-21386
17İzleyin
Private channel enumeration via /mute slash command
OrtaCVSS 4,3İstismar yokEPSS %0
mattermost · mattermost server16 Mar 2026
CVE-2026-25783
17İzleyin
Denial of service via malformed User-Agent header in getBrowserVersion
OrtaCVSS 4,3İstismar yokEPSS %0
- Hizmet dışı bırakma
mattermost · mattermost server16 Mar 2026
CVE-2026-24458
30İzleyin
DoS attack via login attempts with multi-megabyte passwords
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mattermost · mattermost server16 Mar 2026