CVE-2025-43359

creationtimestamp| type| source ---|---|--- 2025-09-17 23:12:47+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xjylsvs2d 2025-09-17 23:14:57+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xnuhons2d 2025-10-13 16:14:58+00:00| seen|...

CVE-2025-55911

creationtimestamp| type| source ---|---|--- 2025-09-17 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qaxzzye2r 2025-09-18 06:13:20+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3lz3ozyewsb2j...

CVE-2025-23316

creationtimestamp| type| source ---|---|--- 2025-09-17 19:45:18+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lz2lwyaysv2p 2025-09-17 23:16:43+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xqz57jk2d 2025-09-18 00:02:01+00:00| seen|...

CVE-2025-8411

creationtimestamp| type| source ---|---|--- 2025-09-17 15:28:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz25med5a42x 2025-09-18 16:08:16+00:00| seen| https://bsky.app/profile/lynxintel.bsky.social/post/3lz4qbs37vf2q...

CVE-2025-9078

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.1, 10.9.x = 10.9.3 fail to properly validate cache keys for link metadata which allows authenticated users to access unauthorized posts and poison link previews via hash collision attacks on FNV-1 hashing...

CVE-2025-9242

creationtimestamp| type| source ---|---|--- 2025-09-17 09:01:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyzhykpokn2b 2025-09-17 09:40:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzk4xxe232u 2025-09-17 11:07:55+00:00| seen|...

CVE-2025-9971

creationtimestamp| type| source ---|---|--- 2025-09-17 07:32:06+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyzcxuzhta2b 2025-09-17 07:50:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzdypxovr2t...

CVE-2025-34186

creationtimestamp| type| source ---|---|--- 2025-09-16 23:27:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyyhvhe4ww2t 2025-09-17 01:32:05+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyyou5fkyy2w 2025-09-17 21:02:30+00:00| seen|...

CVE-2025-34183

creationtimestamp| type| source ---|---|--- 2025-09-16 23:12:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyyh2lb7ii2j 2025-09-17 04:32:12+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyyyw7ljza2m 2025-09-17 21:02:28+00:00| seen|...

CVE-2025-34184

creationtimestamp| type| source ---|---|--- 2025-09-16 20:10:13+00:00| seen| https://gist.github.com/Darkcrai86/5a792e7221fda584809dd70986574994 2025-09-16 23:22:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyyhmigpbu2c 2025-09-17 03:02:04+00:00| seen|...

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is due to failing to validate access controls at the time of access, which allows an attacker to read a thread via AI posts...

CVE-2025-4688

creationtimestamp| type| source ---|---|--- 2025-09-16 09:02:05+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lywxjui6772o 2025-09-16 10:05:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyx32upekl2x 2025-09-17 21:02:47+00:00| seen|...

Mattermost makes Use of Weak Hash

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.1, 10.9.x = 10.9.3 fail to properly validate cache keys for link metadata which allows authenticated users to access unauthorized posts and poison link previews via hash collision attacks on FNV-1 hashing...

Use of Weak Hash

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Use of Weak Hash via the FNV-1 hashing process for cache key validation. An attacker can access unauthorized posts and manipulate link previews by...

CVE-2025-9078

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.1, 10.9.x = 10.9.3 fail to properly validate cache keys for link metadata which allows authenticated users to access unauthorized posts and poison link previews via hash collision attacks on FNV-1 hashing...

CVE-2025-9078 Weak cache keys lead to post IDOR and link preview poisoning

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.1, 10.9.x = 10.9.3 fail to properly validate cache keys for link metadata which allows authenticated users to access unauthorized posts and poison link previews via hash collision attacks on FNV-1 hashing...

CVE-2025-59375

creationtimestamp| type| source ---|---|--- 2025-09-15 06:01:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyu4yh4hw22m 2025-09-15 06:02:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyu4zjmrym2x 2025-09-15 06:18:01+00:00| seen|...

PT-2025-37465

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.8.x through 10.8.3 Mattermost versions 10.5.x through 10.5.8 Mattermost versions 9.11.x through 9.11.17 Mattermost versions 10.10.x through 10.10.1 Mattermost versions 10.9.x through 10.9.3 Description The Mattermost...

Mattermost Server 10.5.x < 10.5.9 / 10.10.0 Incorrect Authorization (MMSA-2025-00470)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00470 advisory. - Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts CVE-2025-49810 Note...

CVE-2020-36732

creationtimestamp| type| source ---|---|--- 2025-09-10 20:15:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lyj2dsk7fz2s 2025-09-10 21:10:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lyj5g4uhge2o...