CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

EUVD-2026-12512

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2 fail to verify runcreate permission for empty playbookId, which allows team members to create unauthorized runs via the playbook run API. Mattermost Advisory ID: MMSA-2025-00542...

CVE-2026-32873

creationtimestamp| type| source ---|---|--- 2026-03-16 20:49:50+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4w98-xf39-23gp 2026-03-20 01:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhfrsmfpq2k...

CVE-2026-26304

Mattermost vulnerability CVE-2026-26304 affects Mattermost server versions 11.3.x (up to 11.3.0) and 11.2.x (up to 11.2.2). The issue is a permission check bypass in the playbook run creation path: run_create permission for an empty playbookId is not verified, enabling team members to create unau...

CVE-2026-30875

creationtimestamp| type| source ---|---|--- 2026-03-16 19:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30875 2026-03-18 22:14:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhej5imvn22t 2026-03-22 11:40:09+00:00| seen|...

CVE-2026-29516

creationtimestamp| type| source ---|---|--- 2026-03-16 19:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-29516...

CVE-2026-31852

creationtimestamp| type| source ---|---|--- 2026-03-16 19:08:55+00:00| seen| https://infosec.exchange/users/mttaggart/statuses/116240425532826680 2026-03-20 18:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj3uisym32m 2026-05-20 18:07:09+00:00| seen|...

GHSA-7432-952R-CW78

creationtimestamp| type| source ---|---|--- 2026-03-16 18:10:06+00:00| seen| https://gist.github.com/alon710/2d123731c9da93f7319d6377d20965fd...

CVE-2026-32732

creationtimestamp| type| source ---|---|--- 2026-03-16 17:10:07+00:00| seen| https://gist.github.com/alon710/6c60d39994445dd225cb9c3de8678dd9...

GHSA-6GGM-PWR9-R5H2

creationtimestamp| type| source ---|---|--- 2026-03-16 17:10:07+00:00| seen| https://gist.github.com/alon710/6c60d39994445dd225cb9c3de8678dd9...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the invite ID validation process. An attacker can gain unauthorized access to create accounts by using leaked invite IDs during the team creation process. Remediation Upgrade...

EUVD-2026-12385

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation.. Mattermost Advisory ID:...

GHSA-FX49-M253-27JJ Mattermost fails to filter invite IDs based on user permissions

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID:...

Mattermost fails to filter invite IDs based on user permissions

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID:...

EUVD-2026-12317

Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value during the creation and expansion of DOC files. An attacker can exhaust server memory resources by uploading a specially crafted DOC file, leading to a denial of service. Remediation Upgrade...

EUVD-2025-208701

Raytha CMS is vulnerable to Stored XSS via FieldValues0.Value parameter in page creation functionality. Authenticated attacker with permissions to create content can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. This issue was fixed in versi...

EUVD-2016-10825

Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages. Attackers can trick logged-in administrators into visiting a malicious site that submits POST requests to the user edit endpoin...

CVE-2026-2463

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation.. Mattermost Advisory ID:...