CVE-2025-55070

creationtimestamp| type| source ---|---|--- 2025-11-14 09:13:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ldphth7i2n 2025-11-14 10:41:11+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5lijvrstxk2...

CVE-2025-55070 Lack of MFA enforcement in WebSocket connections

Mattermost versions 11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events...